When retailers indicator a contract which has a payment processor, they agree to be issue to fines if they are unsuccessful to keep up PCI DSS compliance. The difference between the different types of SOC audits lies within the scope and period on the evaluation: Determine consumers and authenticate entry https://www.nathanlabsadvisory.com/iso-27001-information-security.html