An information security organization must ensure that its service providers have ISO 27001 certification. They must also access supporting documentation. Which...