The name of ISO/IEC2700 1:2005 is "Information Technology-Security Technology-Information Security Management System-Requirements", which can be translated as "Information Technology-Security Technology-Information Security Management System Requirements". It stipulates the requirements of information security management system and information security control, and is the basis for organizing a comprehensive or partial evaluation of information security management system. It can be used as a standard for evaluating and authenticating an organization's comprehensive or partial information security management system.
The former aims at overall information service management, while the latter aims at information security management.
The certification fee is related to the enterprise scale and specific business.