Unlike quite a few compliance rules, SOC compliance is often not obligatory to operate in a very specified marketplace like PCI DSS compliance is for processing payment card information. Generally speaking, businesses need a SOC audit when their prospects request just one. Evaluation requests and inquire any queries (pro idea- https://www.nathanlabsadvisory.com/fisma.html