ISO 27001 Certification is an internationally recognized standard that provide framework for information security management system for preservation of Confidentiality, Integrity and Availability of informational asset in any organization. Information security is achieved through induction of a suitable set of controls, including policies, processes, procedures, software and hardware functions. These controls need to be adequately established, documented, implemented, monitored, reviewed and improved to ensure that the business objectives and necessary security of the organization informational asset are met. Effective ISMS (Information Security Management System) in accordance to ISO 27001 reduces information security risks by protecting the organization informational asset against threats and vulnerabilities, and then reduces its impacts on organization