selection of a service provider responsible for setting up a management tool for the Information Security Management System (ISMS) and the Business Continuity Management System (BCMS) .