Unlike many compliance regulations, SOC compliance is often not required to function in a offered sector like PCI DSS compliance is for processing payment card facts. Generally speaking, organizations have to have a SOC audit when their shoppers request a person. Assessment requests and check with any concerns (pro tip- https://www.nathanlabsadvisory.com/finra.html