A SOC two attestation is predicated within the Trust Services Standards and is furnished by a registered CPA business authorized because of the AICPA. Usually, a SOC 2 report is legitimate for the 12 months and the Firm is required to have interaction the exact same or a different CPA https://www.nathanlabsadvisory.com/blog/nathan/maximize-business-trust-and-security-with-hitrust-compliance/