Source: https://www.foo.be/docs/iso/AnnexIX1302-ListOfControls-ISO-27001.pdf