There is a dangerous misunderstanding in the business world. It usually happens during a vendor review. A prospect asks, “Are you compliant with privacy laws like GDPR or regulations like NIS2?”
The response is often a confident, “Yes, we are ISO 27001 certified.”
That answer is misleading.
