Confidentiality. Programs And functions meet up with the confidentiality needs described with the Business's aims. A report by having an observation period of time ending 18 months back doesn’t Offer you Significantly assurance about current controls. Ask for supplementary documentation confirming that controls remained in place by way of nowadays, https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits