HIPAA and the frameworks buyers add on top.

Healthcare vendors carry HIPAA plus whatever enterprise customers require. Map the safeguards once and reuse the evidence across SOC 2 and ISO 27001.