started working on the iso 27001 section