Unlike a lot of compliance laws, SOC compliance is often not obligatory to work in a very offered field like PCI DSS compliance is for processing payment card information. Generally speaking, organizations require a SOC audit when their buyers ask for one. Dealing with the entry of bank card info https://www.nathanlabsadvisory.com/blog/tag/data-protection-impact-assessments/