A SOC Two need to be completed by a licensed CPA agency. If you select to use compliance automation software, it’s advisable that you select an auditing company that also provides this software Alternative for a far more seamless audit. The PCI Security Standards Council was made by these sector https://www.nathanlabsadvisory.com/adhics-compliance.html