UNDERSTANDING ISO 27001 CERTIFICATION: A KEY TO INFORMATION SECURITY