A SOC two needs to be accomplished by a accredited CPA company. If you end up picking to make the most of compliance automation software, it’s suggested that you select an auditing firm that also provides this software Option for a far more seamless audit. The PCI Security Expectations Council https://www.nathanlabsadvisory.com/financial-cyber-security-consulting.html