And while it is absolutely worth it to stand up your own ISMS and become certified, it helps your decision to know exactly what you’re getting into. External and internal issues, birli well bey interested parties, need to be identified and considered. Requirements may include