Understanding the Difference between ISO/IEC 27001 and ISO/IEC 27002