A certification audit is an independent review of an organisation's ISMS to ensure that it complies with the ISO27001 standard. The audit is conducted by a third-party certification body, and if the organisation passes the audit, it is awarded an ISO27001 certificate.