the changes in annex a security controls are moderate. what are the 2022 key changes in the new version of the standard? iso/ iec 27001: ( e) information security, cybersecurity and privacy protection — information security management systems — requirements. this documen