Master ISMS clauses, all 93 Annex A controls, risk treatment, the Statement of Applicability, and certification audits