A SOC two has to be done by a licensed CPA agency. If you select to make the most of compliance automation software, it’s suggested that you choose an auditing company that also provides this software Option for a more seamless audit. Overview requests and inquire any concerns (Professional tip- https://www.nathanlabsadvisory.com/blog/tag/risk-assessment/