ISO/IEC 27014 is an international standard that focuses on information security governance, a higher-level function than day-to-day management. It provides a framework for executive leadership to direct and control information security based on business needs, legal obligations, and risk e