ISMS
Information Security Management System — the policy, process and control stack ISO 27001 certifies.
An ISMS is an organised set of policies, procedures and controls that an organisation uses to manage information security. ISO 27001 is the certifiable standard that defines ISMS requirements. In practice an ISMS lives as a document pack plus the controls themselves, maintained by a security team and reviewed annually.