https://howto.co.ke/companies-should-seek-iso-27001-certification-in-order-to-comply-with-data-protection-laws/