Badge holders can apply the principles of ISMS policy and its information security scope, objectives, and processes within an organizational context. They can apply the principles of risk management including risk identification, analysis and evaluation and propose appropriate treatments. They can analyze and evaluate effectiveness to continually improve the suitability, adequacy and effectiveness of the ISMS to identify and apply appropriate corrective actions to maintain ISMS conformity.