ISO/IEC 27001

The international standard for information security management. Certification by an accredited auditor is a common mandatory requirement for cloud, data and managed-service tenders.

Also called: ISO 27001

Related terms

SOC 2

An audit report on a service provider’s security, availability and confidentiality controls, issued under US AICPA standards. Buyers of SaaS and hosting often ask for a SOC 2 Type II report.

Cyber Essentials

A UK government-backed certification showing a firm has basic cyber security controls in place. Many UK government contracts that handle personal data or IT systems require it.