ISO
International standards such as ISO 27001 for information security management.
ISO standards set internationally recognized requirements for how organizations manage security and quality. The two most exam-relevant are ISO/IEC 27001, covering information security management systems, and ISO/IEC 42001, the newer AI management system standard for responsible AI governance. AWS holds accredited certifications under both, spanning services such as Amazon Bedrock and Amazon SageMaker. The key distinction from SOC: an ISO certification attests that AWS follows a defined management-system standard, while a SOC report (notably SOC 2 Type II) gives auditor-tested evidence of specific control effectiveness over a period. Both are available through AWS Artifact at no charge.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →