Evolutionary analysis of adherence to the ISO 27001:2013 standard in Portugal: Regional and sectoral study

The growing threat of cybercrime and the explosion of data volume raise critical concerns about information security. Organizations must implement systems that manage, ensure the quality, integrity, and security of information. These systems should adhere to the globally recognized ISO 27001:2013 standard. Certification against this standard has become increasingly important in the business world, prompting an examination of Portugal's progress in this area. This study investigates the evolution of the number of ISO 27001:2013 certified companies in Portugal, including a regional and sectoral analysis of information security management system adoption.