Evidence needs to be proven that policies and strategies are being adopted correctly. The direct auditor is answerable for deciding whether the certification is earned or not. While you may be the individual looking for the certification, ISO 27001 tips complete best when your complete business is on board. http://martinfrydj.free-blogz.com/22997980/detailed-notes-on-iso-27001-requirements