Interesting! Do you have any resources or tips on how startups / small companies can keep the ISO 27001 process lightweight? On a first scan, it seems that the amount of mandatory processed and documents is quite high...