Not like lots of compliance restrictions, SOC compliance is often not necessary to work in a offered sector like PCI DSS compliance is for processing payment card information. In general, organizations have to have a SOC audit when their prospects request 1. Formally attest your compliance. An AOC (attestation of https://www.nathanlabsadvisory.com/nerc-cip-compliance.html