UNDERSTANDING ISO 27001: THE INTERNATIONAL STANDARD FOR INFORMATION SECURITY