As opposed to many compliance laws, SOC compliance is usually not necessary to work in a given industry like PCI DSS compliance is for processing payment card data. Normally, businesses need a SOC audit when their prospects request 1. Find out EU policies designed to provide Added benefits to citizens, https://www.nathanlabsadvisory.com/sox.html