This isn't performed by auditors; it is done with the databrackets workforce to determine the gaps in the procedure. This gives them really precise recommendations of controls they need to style and design and implement. , accepting untokenized PANs on the payment web page) may very well be required to https://www.nathanlabsadvisory.com/blog/nathan/achieving-soc-2-compliance-a-crucial-step-towards-data-security/