I am wondering besides ISO27001 and SOC2 Type 2, is there any other industry standard accreditation or assessment can be used to determine if the MSSP/SOC vendor is of a certain standard/capability?
