When retailers sign a agreement which has a payment processor, they agree to be matter to fines should they are unsuccessful to maintain PCI DSS compliance. SOC 2 is actually a security framework that specifies how businesses should safeguard purchaser data from unauthorized access, security incidents, and also other vulnerabilities. https://www.nathanlabsadvisory.com/blog/tag/incident-response/