C2 Project Risk Management vs Ostendio SOC 2 Compliance (2026)