https://www.sorinmustaca.com/understanding-iso-27001-2022-annex-a-8-asset-management/