[CiPHPerCoder]

> There MUST be some sort of ISO certification for support people.

Would it matter if there was?

You have to pay money to even read what the ISO standards say. The lack of ISO certification is not an impediment for most people or businesses.

[docker_up]

Yes. If there was some uniform standard on how support workers were trained, what data they have access to, then social engineering attacks would drop dramatically. The leaking of data would not be as prevalent and it would be standardized.