WHAT DOES ISO 27001 CERTIFICATION SIGNIFY IN TERMS OF RISK ASSESSMENT?