Hey dear HN community, more and more of our (enterprise) customers are asking for ISO27001 / SOC2 certifications.

Do you have any recommendations about where to start?