Confidentiality: Addresses Controls connected with safety of data deemed confidential between an organization and its customer. This extends to any info deemed private. The Confidentiality Standards is an excellent incorporate-on for many companies. Keep your evidence collection processes running 12 months-spherical, perform inner control tests quarterly, and doc modifications on https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits