ISO 27001 with QEC