Add categories descriptions

Signed-off-by: gearnode <bryan@frimin.fr>

controls/personnel/access/README.md

@@ -0,0 +1,21 @@
+# Configure your system access
+
+You can start by making sure you properly manage access to your company system
+and data.
+
+## Why does it matter?
+
+Someone having access to something he should not can have serious consequences
+such as a data leak or a service interruption. It is important to mitigate those
+risks you have identified previously.
+
+## How can I proceed?
+
+The main idea is to follow those principles:
+
+1. **Least privilege:** everyone’s access is limited to what's necessary for job
+   duties
+2. **Secure:** nobody can easily get access to the your employees
+   passwords/access
+3. **Continuous update:** making sure the privileges are up to date and you use
+   the latest best practices

controls/personnel/comms/README.md

@@ -0,0 +1,17 @@
+# Secure your emails
+
+## Why does it matter?
+
+Do you know what is the most common attack vector among cyber threats?
+**Emails**
+
+And by far! It is also where your employees are talking with externals. By
+configuring a few things in your settings, you are preventing many threats from
+reaching your employees and you are protecting your data and systems.
+
+## How can I proceed?
+
+To do so, we divided the work in two steps:
+
+- You secure the access to your offices.
+- You secure the internet connexion of remote employees

controls/personnel/lifecycle/README.md

@@ -0,0 +1,17 @@
+# Set up your employees for success
+
+## Why does it matter?
+
+Without the proper security measures in place, employees can inadvertently
+expose your company to breaches and vulnerabilities. Providing secure access and
+clear guidelines on handling sensitive information is crucial to protect your
+organization from potential threats.
+
+## How can I proceed?
+
+You will focus on two things:
+
+- **Processes:** whether it is to recruit, onboard or off-board, things are
+  prepared and you are sure not to forgot anything.
+- **Enabling**: empower your employees to take the best decision possible to
+  maintain your security posture