A SOC 2 attestation is based about the Rely on Services Conditions and is provided by a registered CPA firm authorized from the AICPA. Typically, a SOC 2 report is valid to get a year as well as the Firm is necessary to interact a similar or another CPA business https://www.nathanlabsadvisory.com/blog/nathan/stay-ahead-with-effective-web-application-security-testing-strategies/