Not like several compliance restrictions, SOC compliance is typically not mandatory to work inside a provided industry like PCI DSS compliance is for processing payment card info. Generally speaking, companies have to have a SOC audit when their prospects request a person. The distinction between the different sorts of SOC https://www.nathanlabsadvisory.com/blog/author/nathan/page/4/