Not like quite a few compliance polices, SOC compliance is often not mandatory to function in the offered field like PCI DSS compliance is for processing payment card data. Generally speaking, companies require a SOC audit when their customers ask for a person. SOC two is usually a security framework https://www.nathanlabsadvisory.com/blog/tag/strategic-consulting/