Not like a lot of compliance laws, SOC compliance is usually not mandatory to work in the provided industry like PCI DSS compliance is for processing payment card data. Generally speaking, organizations have to have a SOC audit when their clients ask for 1. Managing the entry of bank card https://www.nathanlabsadvisory.com/blog/tag/sama-cybersecurity-framework/