Compared with a lot of compliance regulations, SOC compliance is often not required to operate in the provided market like PCI DSS compliance is for processing payment card facts. Usually, businesses need a SOC audit when their customers ask for 1. The storage interval doesn’t look proportionate to the purpose https://www.nathanlabsadvisory.com/blog/tag/isms/