Add categories descriptions

Signed-off-by: gearnode <bryan@frimin.fr>

controls/physical/facilities/README.md

@@ -0,0 +1,19 @@
+# Secure your offices and internet access
+
+Start by assessing whether your team works from a physical office or operates
+remotely, as this will guide your approach to securing the workspace.
+
+## Why does it matter?
+
+Unauthorized access to your office or network can lead to serious consequences
+such as data theft, or other serious issues. Protecting both physical and
+digital environments is essential to mitigate those risks.
+
+## How can I proceed?
+
+We break this into two main areas of focus:
+
+1. **Office Security:** Ensure that the access to your office is secured against
+   unauthorized entry.
+2. **Internet Security:** Ensure that members of your teams or contractors that
+   work remotely have a secure access to internet.

controls/physical/hardware/README.md

@@ -0,0 +1,19 @@
+# Manage your computers
+
+## Why does it matter?
+
+Your company devices have the potential to store or process data ⇒ If someone
+lose his laptop or it gets compromised, it can expose you to a data leak (and a
+few other things)
+
+## How can I proceed?
+
+You have to make sure that every device is properly set-up. To monitor things,
+the easiest way is to leverage a Mobile Device Management software (MDM), but if
+you are early in your development, proper guidelines are enough. On each
+machine, you need:
+
+- Screenlock is enabled
+- Firewall is active
+- Anti-malware detection is active
+- Data is encrypted