Unlike numerous compliance restrictions, SOC compliance is often not required to work inside of a supplied sector like PCI DSS compliance is for processing payment card facts. In general, providers have to have a SOC audit when their buyers request one. The distinction between the different types of SOC audits https://www.nathanlabsadvisory.com/nesa-compliance.html