In contrast to numerous compliance rules, SOC compliance is usually not necessary to operate within a given industry like PCI DSS compliance is for processing payment card details. Generally speaking, corporations have to have a SOC audit when their consumers request a single. Use strong cryptography when transmitting cardholder data https://www.nathanlabsadvisory.com/blog/tag/compliance/