Yes, for the new Pilot Environment. No for the Pre-Production and Production environments. The endorsement of the Node Operator's EBP representative of an ISO 27001 (or equivalent) certification is mandatory. Concerning the Pilot environment, no ISO 27001 security certification or equivalent is needed.