Instant 27001 demo environment

6.1 Actions to address risks and opportunities