Structure of an information security management system

Hello guys, tbh I dont know if this sub is just for technical security. I would like to discuss and exchange ideas about how to structure an information security mangement system. Right now I am building an ISMS for a firm and started the structure in confluence like this:

* Organization
* Policies
* Risk- & Incidentmangement
* Awareness
* Compliance

building confluence cybersecurity discuss exchange hello ideas information information security information security management information security management system isms management organization policies security structure system technical