Suspect ISO 27001 Cert: Missing from IAF, No Digital Signature - Fake?
I would like to tap into this subreddit's collective wisdom, to enlighten me about the hairy subject of ISO-27001 certificates, specifically about their validity and/or authenticity. This is the case: while doing compliance assessment on some providers for a project in Spain, I've found a suspicious ISO-27001 certificate. Here it is: https://www.esbsistemas.com/wp-content/uploads/2025/07/ESB-SISTEMAS-ESPANA-SI-27001-inicial-2025-1.pdf That ISO-27001 certificate purports to be provided by the CB...