Results for iso 27001, soc 2 type ii enterprise risk mitigation and fee negotiation