It depends.  If your customers require your organisation to be certified in order to award business, then certification is worthwhile.  Moreover, for organisations that are not required by their customers to be certified, there are still clear and tangible benefits in being certified, including: providing assurance to stakeholders that there is a system in place to preserve the confidentiality, integrity and availability of information and to give confidence to interested parties that information security risk is managed.