Examples Could involve data meant just for firm staff, along with enterprise ideas, mental property, internal price tag lists and other types of sensitive economic data. Time it will require to gather evidence will differ based upon the scope from the audit plus the resources employed to gather the evidence. https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits