Annex A of ISO 27001:2022 explained and tips to prepare for an audit