From a comment in a blogpost about Chinese fraudsters, a somewhat related note about the ISO certification regime:
ISO900x - which sounded grand, but all it did was to say you had a repeatable process (so if your process was to dump every client complaint into a waste basket, and you could prove that no-one ever did anything else, you'd be ISO9000 for customer complaints procedures).