The ISO-17799 certification requires an established policy on communications security and well-documented procedures.