https://www.pivotpointsecurity.com/iso-27001-certification-audits-the-answers-to-who-how-long-and-how-much/