@calamari IS 27001 is a perfect example of the bureaucratic way of ensuring system security.