Keep your ISMS simple when starting out. Do not over promise in policies. Auditors will assess you based on the requirements within your policies and 27001. The ISO 27001 Lead Auditor training highlights this!