I was tasked with establishment of ISMS which essentially involved defining scope and boundaries of ISMS, performing a gap analysis to gain an understanding of current posture, performing risk assessment and preparing risk treatment plan and documenting policies and standard operating procedures for the IT Security function. I was additionally involved in sensitizing the senior management on Risk Management and ISO 27001 through train the trainer workshop sessions.