Yes. Certification provides assurance about defined controls or a management system within a stated scope and assessment period. It does not remove the possibility of control failure, human error, new vulnerabilities, changes after the assessment or exposures outside scope. Certification remains useful evidence, but it should be interpreted in context.
FAQ