WHAT AUDITORS LOOK FOR DURING ISO 27001 CERTIFICATION IN SOUTH AFRICA