Getting certified to ISO/IEC 27001