Implementing Organizational Controls in ISO 27001:2022: Strengthening Information Security Practices