You’re Investigating two to four months from kickoff to having your Kind I report in hand, assuming you’ve by now acquired your controls documented and running. For Sort II, tack on One more 6 to 12 months for your observation time period before the auditor even starts their fieldwork. Along https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits