Not over-thinking what is required. I spent sleepless nights trying to figure out Context of the Organization....what does that even mean. Then one day I just sat down with the standard, read what it said, and came up with our own plan and not someone else's idea of what the requirement stated. Our 3rd party auditor said it was simple and complete. BOOM!
