ISO/IEC 27014:2013 provides guidance on concepts and principles for the governance of information security, by which organizations can evaluate, direct, monitor and communicate the information security related activities within the organization. ISO/IEC 27014:2013 is applicable to all types and sizes of organizations