The timeline planner.
Work back from the deal.Enter the date you need proof in hand and what you're pursuing. The planner computes every milestone backwards — and tells you honestly whether the date survives contact with the calendar.
| Milestone | Start by | Duration |
|---|
Where do the phase durations come from?
Our SOC 2 and ISO 27001 timeline guides — readiness build, observation window or ISMS operating period, fieldwork, and reporting, using the ranges real programs hit with an owner and automation. "No owner yet" applies the honest multiplier stalled programs actually experience.
The plan says my deadline is not feasible. Now what?
Three honest options: a Type I as a placeholder with a Type II commitment letter (satisfies some buyers), renegotiating the deal milestone, or compressing the readiness phase with operators who have run the playbook — the one phase that legitimately compresses.
Why does the Type II window not compress?
Because it is calendar, not effort: controls must operate over real time, and auditors write the period into the report. Three months is the accepted floor for a first report — promises to shortcut it produce reports buyers discount.