27001 Lesson 3 – Part Two