Company that want to become SOC2 or iso27001 can automate all of this and more with https://www.vanta.com/. This helps us a lot at https://mergify.io for our SOC2 certification.