The international standard ISO 27001 defines requirements for the Information Security Management System’s (ISMS) continuous improvement. https://ias-certification.com/ca/iso-27001-certification-in-canada/