Information security is very important for both individuals and organizations. Successful implementation of information security within state bodies, or in general within any business organization, requires systematic management of various aspects of information security, supported by an appropriate legal framework. Security measures are necessary in order to conduct business in a proper and safe manner, and implement in the system standards that will help protect. It is necessary to emphasize the ISO 27001 standard, which is an international standard published by the International Organization for Standardization (ISO), and defines how to properly and most importantly securely manage information security in companies. As for the latest version of this standard was published in 2013. The paper presents an example of Gradska plinara Zagreb, which has implemented the ISO 27001 standard in its operations in order to have a secure information security management system. With the help of this standard, they ensure the availability of information only to authorized persons, and the confidentiality of data is maintained. The year 2020 is crucial for Gradska plinara Zagreb, because they have been allocated money to strengthen cyber security. The European Commission has approved just over 2.3 million kunas for a project to improve cyber security, and to enable safe and reliable gas distribution.