The information controller establishes the applications for which and also the means by which own info is processed. Build firewalls and router specifications, which established rules for enabling and denying usage of your devices. Firewall configurations should be reviewed bi-per year to be sure there won't be any faulty access https://www.nathanlabsadvisory.com/blog/tag/iso-27001/