What are ISO 27001 and SOC 2? SOC 2 and ISO 27001 both provide companies with strategic frameworks and standards for measuring their security controls and systems. ISO 27001, also known as ISO/IEC 27001 , is a set of standards and requirements for an information security management system (ISMS).