Analysis of the PM processes completed during the implementation of the
ISO/IEC 27001 information security standard in a medium size company, and discussion of
the adequacy of the choice of processes adopted and discarded, by means of a
contrastive matrix that confronts classic PM processes, the ISO recommendations and
the strategy followed by the project team.