Not like numerous compliance restrictions, SOC compliance is often not required to work in the provided field like PCI DSS compliance is for processing payment card details. In general, companies need a SOC audit when their clients ask for 1. You'll find various processes for accomplishing each standard of certification. https://www.nathanlabsadvisory.com/blog/tag/cybersecurity-talent-shortage/