Compliance

Meeting a standard demonstrates that a defined baseline was met, on a particular date, within a particular scope.

All three qualifiers matter and all three get dropped when the certificate is put on the website. It is genuine evidence of something and it is evidence about a moment rather than a state. Treating it as a continuing property of the organisation is the most common misreading.

Checked against the primary source.

More on Governance & risk