Not like several compliance polices, SOC compliance is typically not necessary to work within a given industry like PCI DSS compliance is for processing payment card details. On the whole, organizations need a SOC audit when their shoppers request 1. The PCI Security Standards Council was established by these marketplace https://www.nathanlabsadvisory.com/blog/tag/compliance-assurance/