Not like lots of compliance regulations, SOC compliance is often not obligatory to function inside a presented sector like PCI DSS compliance is for processing payment card data. In general, businesses need a SOC audit when their consumers request just one. Your company is service company dependent outdoors the EU. https://www.nathanlabsadvisory.com/rbi-cyber-security-framework.html