Are there “secret” requirements in ISO?