Contrary to quite a few compliance laws, SOC compliance is often not obligatory to operate inside of a supplied market like PCI DSS compliance is for processing payment card knowledge. In general, companies need a SOC audit when their customers request one particular. SOC two is really an auditing procedure https://www.nathanlabsadvisory.com/blog/category/nathan/page/4/