Certification to ISO 27001 is the globally recognized standard for a functioning information security management system (ISMS). The standard specifies which requirements apply to the introduction, implementation, monitoring, maintenance and optimization of the ISMS. Certification credibly demonstrates the effectiveness of the ISMS, i.e. that information and data are adequately protected. During the certification process, weak points and risks for companies or building operators are identified, analyzed and eliminated. Confidential data can thus be adequately protected and the integrity of IT systems improved. Data security is a key issue in building operations. This includes not only personal data, but also plans, security protocols and other sensitive information. Implementing ISO 27001 access controls can also protect building areas and the information they contain. Building automation and maintenance systems must also be protected from unauthorized access to ensure the integrity of TGA in building operations. ISO 27001 certification demonstrates that appropriate security measures have been implemented, thereby increasing the confidence of users and other stakeholders.