A SOC two have to be done by a certified CPA agency. If you choose to make use of compliance automation software, it’s advised that you choose an auditing business that also provides this software Answer for a more seamless audit. Nth-party suppliers: 3rd-get together distributors may perhaps them selves https://www.nathanlabsadvisory.com/iso-27001-information-security.html