Posts on soc 2

No UK law requires SOC 2. You need it when US customers write it into contracts. Here is what SOC 2 involves, Type 1 vs Type 2, and when ISO 27001 will do.

Most UK firms start with Cyber Essentials, add ISO 27001 when customers ask for a certified security system, and need SOC 2 only for US buyers.