(v1.3 – September 2020) Defines the control objectives and controls applied within the business, as per the requirements of BS ISO/IEC 27001:2013 – Annex A.