An organization is updating its information security policies to include guidelines for the use of cloud services, threat intelligence, and ICT readiness for business continuity.
According to the ISO 27001:2022 Annex A structure, these controls primarily fall under which theme?