SOC 2 Type I & Type II (TSC 2017) readiness for pe-backed portcos. Realistic timelines, costs, and the controls that fail audits in this vertical.