In contrast to a lot of compliance laws, SOC compliance is usually not obligatory to work in a provided market like PCI DSS compliance is for processing payment card data. Generally, businesses require a SOC audit when their prospects request a single. Share your sights on EU regulations and policies, https://www.nathanlabsadvisory.com/blog/tag/sama-cybersecurity-framework/