Unfortunately, the usefulness of this standard depends on the quality of the auditing, and that seems to be sorely lacking (where I live). Recently, a competing company had a nasty data leak, despite being certified (by the same company that audited us). So much depends on introspection and self-reporting, that only sufficient time, money and integrity can turn 27001 into more than a thin layer of veneer.