You’re Looking at two to four months from kickoff to acquiring your Sort I report in hand, assuming you’ve now acquired your controls documented and managing. For Sort II, tack on One more six to 12 months for that observation period of time ahead of the auditor even starts off https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits