The ISL HealthCheck recommendations are presented as an implementation strategy (risk treatment plan). The list of risk control measures provided are prioritised in terms of effectiveness and classified by the expected resource required for implementation. The strategy, in combination with the review of existing documentation, provides the basic building blocks required to create and implement an Information Security Management System (ISMS) within the organisation.