Governance & Compliance
ISO 27001
Also: ISO/IEC 27001
An international standard for running an information security management system, certified by an external auditor.
In more detail
It asks organizations to assess risk, choose controls and keep improving them. Common in Europe and in global enterprise procurement, it often sits next to SOC 2.