▲ 14 r/soc2
Just finished SOC 2. Starting ISO 27001. What carried over and what had to be rebuilt
SOC 2 Type 2 done, starting ISO 27001 prep now. Everyone says there's a lot of overlap and I'm sure that's true to a degree, but I want specifics rather than vibes. What transferred without modification, what needed documentation changes for ISO's framing, and what was net new work?
u/InitialFlatworm33 — 8 days ago