CISSP: Certified Information Systems Security Professional

SOC 2 evaluates a service organization’s controls against Trust Services Criteria that include security, confidentiality, and privacy, making it suitable for assessing a SaaS solution’s security and data-privacy controls. HIPAA and PCI are sector-specific requirements for protected health information and payment-card data, respectively.