This whitepaper from BSI is available as part of the Cybersecurity Management Solution Pack.
It can also be accessed on the BSI Group Website: https://www.bsigroup.com/en-GB/topics/information-security/