Compared with several compliance laws, SOC compliance is typically not obligatory to operate within a provided industry like PCI DSS compliance is for processing payment card data. Normally, companies need a SOC audit when their prospects ask for 1. Formally attest your compliance. An AOC (attestation of compliance) is the https://www.nathanlabsadvisory.com/security-program-advisory.html