As opposed to several compliance rules, SOC compliance is typically not mandatory to work inside of a given field like PCI DSS compliance is for processing payment card info. On the whole, businesses have to have a SOC audit when their prospects ask for a single. Find out EU policies https://www.nathanlabsadvisory.com/blog/tag/incident-response/