Applying common inventory using ISO controls to control ransomware. For brevity, we use the ‘ISO number’ notation to depict ISO/IEC 27002 clauses. Adapted from: Ho et al. [16].