Unlike several compliance laws, SOC compliance is usually not mandatory to operate inside a provided marketplace like PCI DSS compliance is for processing payment card info. On the whole, organizations have to have a SOC audit when their prospects ask for one. Use strong cryptography when transmitting cardholder information throughout https://www.nathanlabsadvisory.com/iso-22301-business-continuity.html