Unlike many compliance polices, SOC compliance is usually not required to function in a supplied sector like PCI DSS compliance is for processing payment card information. Normally, companies require a SOC audit when their customers request one. Nth-party sellers: 3rd-get together suppliers could them selves receive code from exterior libraries. https://www.nathanlabsadvisory.com/cybersecurity-fintechs.html