As opposed to lots of compliance restrictions, SOC compliance is usually not mandatory to work in a very presented field like PCI DSS compliance is for processing payment card data. Generally speaking, organizations have to have a SOC audit when their shoppers request 1. Share your sights on EU legislation https://www.nathanlabsadvisory.com/blog/tag/financial-institutions/