Recruitment of a specialized firm to conduct the ISO 27001 certification audit