In a data center environment, a company conducts regular audits and assessments of its storage area network (SAN) to ensure compliance with industry standards and to identify potential vulnerabilities. During the latest audit, it was discovered that the average latency for data retrieval from the SAN was 15 milliseconds, with a standard deviation of 3 milliseconds. The company aims to reduce this latency to below 10 milliseconds. If the company implements a new storage protocol that is expected to reduce latency by 20%, what will be the new average latency after the implementation? Additionally, what implications does this reduction have on the overall performance and compliance with the relevant standards such as ISO/IEC 27001?