Any process influencing the quality of services and products must be monitored and assessed through the quality management system using instruments like Turtle Diagrams. Conformity with ISO/IEC 27001 implies that a company or small business has set set up a system to handle pitfalls relevant to the security of information https://www.nathanlabsadvisory.com/blog/nathan/maximize-business-trust-and-security-with-hitrust-compliance/