The ISO/IEC 27001 certificate does not necessarily mean the remainder of the organization, outside the scoped area, özgü an adequate approach to information security management.Ne