Basic Logic of ISO 27001: How Does Information Security Work