All over again, Remember the fact that these aren’t “fines” in the exact same sense that, say, you’d buy violating some govt regulation or website traffic regulation; they’re penalties designed right into a contract amongst merchants, payment processors, and card makes. SOC 2 is undoubtedly an auditing course of action https://www.nathanlabsadvisory.com/blog/tag/compliance/