You’re Taking a look at two to 4 months from kickoff to getting your Kind I report in hand, assuming you’ve already bought your controls documented and working. For Kind II, tack on An additional six to twelve months to the observation interval before the auditor even starts off their https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits