Unlike numerous compliance regulations, SOC compliance is usually not mandatory to work inside of a presented business like PCI DSS compliance is for processing payment card details. Generally, organizations have to have a SOC audit when their clients ask for one. Your organization is service supplier based outdoors the EU. https://www.nathanlabsadvisory.com/blog/nathan/navigating-the-2023-cybersecurity-threat-landscape-challenges-and-strategies/