Make a timeline and delegate jobs (compliance automation software can make this exercise much less time consuming) SOC two is a security framework that specifies how companies should really protect consumer knowledge from unauthorized entry, security incidents, as well as other vulnerabilities. Stripe.js v2 SAQ A-EP Making use of Stripe.js https://www.nathanlabsadvisory.com/cmmc.html