M 1 Common aspects
B 1.3 Business continuity management
B 1.6 Protection against malware
B 1.8 Handling security incidents
B 1.9 Hard- and Software-Management
B 1.13 Information security awareness and training
B 1.14 Patch and change management