You are the controller for a medium- sized electronic parts manufacturer. Your company already has ISO 9001 certification, which has immensely helped in impressing new customers. Your CEO now wants ISO/ IEC 27000 series certification.

Required
a. Write a report to the CEO that explains the costs versus benefits of certification under the ISO/ IEC 27000 series.
b. The report should explain how to go about getting the certification. What will the steps be? How long will it take? Will the company’s existing ISO 9001 certification help it get the additional certification?