If your company is dipping its toes into information security for the first time, you’ve almost certainly come across the ISO 27001 standard. And right alongside it, you’ve probably bumped into another standard with a suspiciously similar name: ISO 27002. Are they the same thing?