"Without it, organisations could be subjected to significant risks, including legal and financial exposure.??? So far, ISO has published part 1 of the standard, which covers processes and areas such as risk management and cost control." . . . . . . .