Confidentiality: Addresses Controls relevant to security of data deemed confidential in between an organization and its consumer. This extends to any data deemed private. The Confidentiality Conditions is a superb include-on for most organizations. To secure a SOC 2 report, you need to retain the services of an external auditor https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits