Understand the context of organization and risk-based thinking in ISO/IEC 27001

1. Concept and interpretation of context of organization and risk-based thinking in ISO/IEC 27001
2. Apply the risk-based thinking in the ISMS