ISO/IEC 27001
ISO/IEC 27001 is an international standard for information security management that specifies requirements for establishing, operating, and continually improving an information security management system (ISMS).
Unlike a point-in-time audit, certification to ISO/IEC 27001 is granted by an accredited body and attests that an organization runs a systematic, risk-based program for managing information security.
It is widely recognized in enterprise procurement as evidence that a vendor has formal security governance in place.