Devise link from requirements to SOP

[ribose-jeffreylau]

SOP = standard operational procedure

In ISO 27001, it's called the SOA.

Essentially, the workflow is:

• Translate SOP into the implementation model
• Link the relevant parts in the implementation model to the requirement clauses of the standard