While the PCI SSC has no authorized authority to compel compliance, This is a prerequisite for almost any enterprise that processes credit or debit card transactions. There's two different types of SOC 2 attestation experiences. A Type I report assesses an organization’s cybersecurity controls at only one level in time. https://bestcybersecurityconsulting.com/blogs/top-cybersecurity-experts-protect-your-business-from-threats-today/