Correct. And even worse: i knew of a company (my own), which was ISO 9001 certified for one field of their activities, but used the certificate for all of their activities, since the actual certificate didn't state which branch of the company was tested. So much for ISO 9001.