A SOC 2 has to be completed by a accredited CPA organization. If you choose to use compliance automation software, it’s encouraged that you select an auditing business that also provides this software solution for a more seamless audit. Formally attest your compliance. An AOC (attestation of compliance) is the https://www.nathanlabsadvisory.com/iso-27001-information-security.html