Compared with numerous compliance restrictions, SOC compliance is typically not necessary to function within a provided market like PCI DSS compliance is for processing payment card info. Normally, firms require a SOC audit when their buyers ask for 1. The PCI Security Standards Council was made by these industry players https://www.nathanlabsadvisory.com/soc-2.html