ISO 27001 is becoming a requirement for winning contracts and working with larger clients. Here’s what it is, what it costs, and whether certification is right for your business.