The first piece is in the works: a case study of putting my one-person company through a full ISO 27001 cycle. Every document, every decision.