When retailers indicator a contract which has a payment processor, they agree to be subject to fines if they are unsuccessful to keep up PCI DSS compliance. SOC compliance is intended to confirm into a service company’s buyers that a business can provide the services that it is contracted for. https://www.nathanlabsadvisory.com/infrastructure-security-testing.html