As opposed to many compliance restrictions, SOC compliance is often not mandatory to function within a specified business like PCI DSS compliance is for processing payment card details. Usually, businesses require a SOC audit when their customers ask for just one. SOC two can be an auditing course of action https://www.nathanlabsadvisory.com/blog/tag/best-practices/