Confidentiality. Devices And functions meet the confidentiality specifications defined through the organization's aims. A report with an observation interval ending 18 months in the past doesn’t Provide you with much assurance about recent controls. Request supplementary documentation confirming that controls remained in position by way of these days, or request https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits