A SOC 2 need to be concluded by a licensed CPA agency. If you decide on to employ compliance automation software, it’s encouraged that you choose an auditing organization that also provides this software Alternative for a far more seamless audit. Formally attest your compliance. An AOC (attestation of compliance) https://www.nathanlabsadvisory.com/blog/tag/security-awareness/