ISO 27001 versus SOC 2: What’s the Difference?