Implementing Organizational Controls In Iso 27001:2022: Strengthening Information Security Practices