In contrast to quite a few compliance polices, SOC compliance is typically not obligatory to function within a presented field like PCI DSS compliance is for processing payment card data. In general, providers need a SOC audit when their customers ask for a single. Use robust cryptography when transmitting cardholder https://www.nathanlabsadvisory.com/blog/nathan/hipaa-compliance-checklist-ensuring-data-security-in-healthcare/