Again, Take into account that these aren’t “fines” in the identical feeling that, say, you’d buy violating some government regulation or visitors regulation; they’re penalties crafted right into a deal between merchants, payment processors, and card models. The distinction between the differing types of SOC audits lies within the scope https://www.nathanlabsadvisory.com/blog/nathan/achieving-soc-2-compliance-a-crucial-step-towards-data-security/