An external certification body assesses the organization's compliance with ISO 27001 standards. Upon successful evaluation, the business receives ISO 27001 certification.