A SOC 2 needs to be accomplished by a certified CPA business. If you choose to use compliance automation software, it’s encouraged that you select an auditing organization that also provides this software Option for a far more seamless audit. The PCI Security Benchmarks Council was designed by these field https://www.nathanlabsadvisory.com/blog/tag/security-testing/