Question: what is the difference between sox compliance and iso 27001?
Answer: ISO 27001 is an ISMS standard, but it is not a law. It is not required for a company to be compliant with ISO 27001, however, SOX 404 is a law that has to be adhered by all the publicly traded companies in the US.