ISO/IEC 27002

I mean, the question is always what you're trying to achieve, of course, and also how much prior knowledge you have.

I mean, many companies, they start with ISO 27002, which is also a great resource.

But the problem with ISO 27002 is, You only have 93 controls, at least that's what they call it.

And then under each control you have an implementation guidance that often spans one or two pages.

And then you can find useful guidance all throughout the document.

or framework that ticks all the boxes, so we take a combination.

ISO 27002, because it's 27002 now, NIST, Essential 8, and what we call the VPDSS, the Victorian Protective Data Security Standards.

In the last one, not all of them apply to us, but the ones that are relevant in the context of how we operate and what we hold, we align to those.

How do you see the frontline technology evolving? So you mentioned that Heidi, you'll implement in a greater proportion of the user cohort.