A SOC 2 has to be concluded by a certified CPA firm. If you select to utilize compliance automation software, it’s recommended that you select an auditing organization that also offers this software Resolution for a more seamless audit. The PCI Security Expectations Council was made by these marketplace players https://www.nathanlabsadvisory.com/vapt-services.html