Not like lots of compliance polices, SOC compliance is usually not required to work in the presented business like PCI DSS compliance is for processing payment card data. Normally, providers require a SOC audit when their prospects request 1. The PCI Security Standards Council was created by these field gamers https://www.nathanlabsadvisory.com/ciso-service.html