Think of all the things you do during the day to handle ISMS things. You might work on documentation: making information security...