Answer :
- Organizations can obtain certification against ISO/IEC 27001
Explanation :
Organizations can obtain certification against ISO standards that specify requirements (also referred to as normative standards), but not against ISO standards that provide guidelines. ISO/IEC 27001 is a normative standard and, as such, organizations can obtain certification against it. On the other hand, ISO/IEC 27005 is a guideline standard and therefore organizations cannot obtain certification against it.