As opposed to lots of compliance polices, SOC compliance is typically not mandatory to operate in the provided business like PCI DSS compliance is for processing payment card info. In general, organizations need a SOC audit when their prospects request one particular. Making sure that this legislation is used continuously, https://www.nathanlabsadvisory.com/blog/nathan/understanding-the-sama-cybersecurity-framework-requirements-and-implementation/