The University of SydneyPage 25ISO/IEC 27000 series–AS/NZS ISO/IEC 27002:2022Information Security, Cybersecurity and Privacy protection -Information Security Controls