High Table Logo - ISO 27001
HT Fav Icon

ISO27001:2022 FAQ

What is ISO 27001?
What is ISO 27001 Certification?
How much does ISO 27001 Cost?
What are ISO 27001 Policies?
What are ISO 27001 Documents?

Home / ISO 27001 Glossary of Terms / Encryption

Encryption

13/09/2025

Author: Stuart Barker | ISO 27001 Expert and Thought Leader

Encryption Definition - ISO 27001 Glossary

ISO 27001 Encryption is a way of scrambling information so that it can’t be read by just anyone. Think of it like a secret code. You use a key to lock the information, and only someone with the right key can unlock it to see the original message.

Examples

  • Sending a private message to a friend online. The app uses encryption to make sure only your friend can read it.
  • Protecting your credit card details when you shop on a website. The website uses encryption to keep your information safe.

Context

In the world of ISO 27001, which is about keeping information safe, encryption is a key tool. It helps companies protect their important information, like customer details or business secrets, from being seen by people who shouldn’t see it. It’s a way of making sure that even if someone gets the information, they can’t understand it.

Relevant ISO 27001 Controls

The following controls from the ISO/IEC 27001:2022 standard are related to encryption:

Stuart Barker, ISO 27001 expert

Stuart Barker
ISO 27001 Expert and Thought Leader

Book a Call
ISO 27001 Toolkit Business Edition
ISO 27001:2022 Jumpstart Kit
ISO 27001:2022 Toolkit: Business Edition
ISO 27001:2022 Toolkit: Consultant Edition
Stuart Barker, ISO 27001 expert

About the author

Stuart Barker is an information security practitioner of over 30 years. He holds an MSc in Software and Systems Security and an undergraduate degree in Software Engineering. He is an ISO 27001 expert and thought leader holding both ISO 27001 Lead Implementer and ISO 27001 Lead Auditor qualifications. In 2010 he started his first cyber security consulting business that he sold in 2018. He worked for over a decade for GE, leading a data governance team across Europe and since then has gone on to deliver hundreds of client engagements and audits.

He regularly mentors and trains professionals on information security and runs a successful ISO 27001 YouTube channel where he shows people how they can implement ISO 27001 themselves. He is passionate that knowledge should not be hoarded and brought to market the first of its kind online ISO 27001 store for all the tools and templates people need when they want to do it themselves.

In his personal life he is an active and a hobbyist kickboxer.

His specialisms are ISO 27001 and SOC 2 and his niche is start up and early stage business.