ISO/IEC 27001:2022手册指导中小型企业（SME）根据ISO/IEC 27001开发和实施信息安全管理系统（ISMS），以帮助保护自己免受网络风险。中小企业可以使用该手册获得ISO/IEC 27001条款和子条款要求的简要摘要。该手册还包括例子和案例研究，以帮助资源有限的中小企业理解和应用标准，减少对广泛专业知识或大量金融投资的需求。

ISO/IEC 27001:2022 Handbook guides small and medium-sized enterprises (SMEs) in developing and implementing an information security management system (ISMS) in accordance with ISO/IEC 27001, in order to help protect themselves from cyber risks. SMEs can use the handbook to obtain a brief summary of the requirements on the clauses and subclauses of ISO/IEC 27001. The handbook also includes examples and case studies to help SMEs with limited resources to understand and apply the standards reducing the need of extensive expertise or significant financial investment.