A SOC two attestation is based over the Have confidence in Services Requirements and is also supplied by a registered CPA agency approved through the AICPA. Usually, a SOC 2 report is legitimate for your 12 months along with the Firm is needed to engage the identical or another CPA https://www.nathanlabsadvisory.com/blog/nathan/secure-federal-contracts-with-fisma-compliance/