ISO27001 Clause 4.4 Information Security Management System is a small 2-line clause which does not look like it should really matter, it says: The organisation shall establish, implement, maintain, and continually improve an information security management system, in accordance with the requirements of this international standard. Great, easy, that...