In Contrast to many compliance laws, SOC compliance is often not required to work inside a offered business like PCI DSS compliance is for processing payment card information. Generally, businesses have to have a SOC audit when their buyers request just one. Evaluation requests and request any concerns (Professional suggestion- https://www.nathanlabsadvisory.com/supply-chain-security.html