Hmm, Interesting. Doesnt ISO27001 have like a really tough barrier or something - I did some googling and I guess one needs to have some certifications or something under their belt.

Still tho, I think this seems like a niche enough thing to pursue.