As opposed to a lot of compliance laws, SOC compliance is typically not obligatory to operate in a very provided field like PCI DSS compliance is for processing payment card information. Normally, firms need a SOC audit when their customers ask for just one. The GDPR guards personal knowledge whatever https://www.nathanlabsadvisory.com/blog/tag/threat-simulation/