A SOC 2 attestation is predicated to the Belief Services Criteria and is particularly supplied by a registered CPA business approved via the AICPA. Usually, a SOC 2 report is legitimate for just a yr plus the Group is needed to have interaction precisely the same or a special CPA https://www.nathanlabsadvisory.com/blog/nathan/secure-federal-contracts-with-fisma-compliance/