You’re Checking out two to four months from kickoff to getting your Variety I report in hand, assuming you’ve now obtained your controls documented and functioning. For Style II, tack on Yet another 6 to twelve months for that observation time period prior to the auditor even begins their fieldwork. https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits