Check That the auditor is impartial from the vendor. Independence principles prohibit auditors from developing the controls they audit or possessing economical passions in the corporation they’re inspecting. That’s a conflict of fascination you should stay away from. A SOC two Variety one report will detail your protection controls at https://calvant.com/blog/iso-27001-vs-soc-2-comparison-differences-benefits