What is the purpose of ISO/IEC 27002?

What will be an ideal response?

The stated purpose of ISO/IEC 27002 is to provide recommendations for information security management for use by those who are responsible for initiating, implementing, or maintaining security in their organization. It is intended to provide a common basis for developing organizational security standards and effective security management practice and to provide confidence in interorganizational dealings. It is also designed to serve as a metric for the assessment of "good security management" within the organization, as defined in the ISO series.