When organisations wish to introduce or further develop an information security management system (ISMS), the focus very quickly tends to shift to policies, documentation, templates and technical measures. Many projects begin with extensive checklists, standard...









