The intent of ISO27001 and 27002 standard

  http://en.wikipedia.org/wiki/ISO/IEC_27000-series Explain the intent of ISO27001 and 27002 standard and how it might be applied or used in a mid-sized organization. Summarize the essential points of that standard and what security managers can do to implement the standard in their organization. Description of the standard -- i.e., what does it cover? The intent of standard – i.e., how does it address what it intends to cover? How would this standard be applied in a mid-sized organization? Have a separate page for each standard