I'm going through a SOC 2 audit right now. My biggest problem is all of the repetative questions that they can't seem to correlate in the simple little minds. I haven't found any auditors that can seem to master that "little" problem nor have I found many that come close to auditor requirements expressed in AT101.5
--Jeff Moden
Change is inevitable... Change for the better is not.