As Opposed to quite a few compliance polices, SOC compliance is typically not necessary to work within a provided market like PCI DSS compliance is for processing payment card details. In general, companies have to have a SOC audit when their prospects ask for a person. Learn EU policies intended https://www.nathanlabsadvisory.com/blog/nathan/secure-federal-contracts-with-fisma-compliance/