A SOC two need to be concluded by a certified CPA organization. If you end up picking to employ compliance automation software, it’s advisable that you select an auditing company that also offers this software Option for a more seamless audit. Formally attest your compliance. An AOC (attestation of compliance) https://www.nathanlabsadvisory.com/blog/tag/threat-simulation/