It Troubles rules regarding how to interpret Main concepts of your GDPR and might problem binding choices tackled to the information defense authorities on dispute in concrete conditions relating to cross-border processing. The distinction between the different sorts of SOC audits lies from the scope and length from the evaluation: https://www.nathanlabsadvisory.com/blog/category/nathan/page/5/