Differences in implementing security standards between operations areas and those of a standard office environment How to apply security controls and requirements in the operations areas How to resolve the implementation pitfalls of security controls in ISO 27002 Adapting information security initiatives to more complex business environments and their individual requirements, rather than following generalised, non-business specific advice