RECRUITMENT OF A SPECIALIZED FIRM FOR THE IMPLEMENTATION OF AN INFORMATION SECURITY MANAGEMENT SYSTEM (ISMS).