I view ISO standards as a tax on companies who are willing to stand by their product and processes. Modulo obvious caveats, if they can get certification/compliance/accreditation , the end user can have a modicum of confidence when dealing with the business. It lets you buy toys for your child with a peace of mind, or get into a car with ISO certified airbags, or buy network equipment for your server build, etc etc. Its trivial to point out flaws in any system, its not easy to propose something better that you can actually implement in the real world.