You’re Thinking about two to four months from kickoff to acquiring your Type I report in hand, assuming you’ve by now received your controls documented and functioning. For Variety II, tack on A further 6 to 12 months with the observation period of time ahead of the auditor even starts https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits