ISO 27001 means they have processes in place that proof that risks are monitored and continuous improvements are being made. ISO 27001 means they have policies, and can show those policies to the auditor.
Never assume that having that certification means that shit is actually secure. It just means the company can do the audit dance.
Never assume that having that certification means that shit is actually secure. It just means the company can do the audit dance.