ISO 27001 Alone isn’t a lawful need. Nevertheless, it’s useful for complying with legal requirements in industries with obligatory rules, which include health and fitness treatment. Clause 10 of ISO 27001 - Advancement – Improvement follows the evaluation. Nonconformities must be tackled by taking action and removing their brings about. https://calvant.com/blog/iso-27001-soc-2-compliance-solutions-unified-framework