HOW ISO 27001 CERTIFICATION ENHANCES INFORMATION SECURITY IN UK COMPANIES