Internal and external issues affecting the ISMS.
Stakeholders and their requirements.
The boundaries of the ISMS.
Establish, run and improve the ISMS.