1. INFORMATION SECURITY AWARENESS
2. WHICH POLICIES AND PROCEDURES ARE COVERED
3. CHANGE MANAGEMENT POLICY
4. LEGAL COMPLIANCE POLICY
5. UNDERSTANDING AND IMPLEMENTING CONTROLS
6. A.6.2.1 MOBILE DEVICE POLICY (ISO 27001 CONTROL)
7. A.8 ASSET MANAGEMENT
8. A.10 CRYPTOGRAPHY
9. A.11 PHYSICAL AND ENVIRONMENTAL SECURITY
10. A.12 OPERATIONS SECURITY
11. NETWORK SECURITY MANAGEMENT
12. A.14 SYSTEM ACQUISITION, DEVELOPMENT, AND MAINTENANCE
13. A.15 SUPPLIER RELATIONSHIPS
14. A.17 INFORMATION SECURITY ASPECTS OF BUSINESS CONTINUITY Management
