When merchants indication a contract by using a payment processor, they comply with be subject matter to fines should they fail to maintain PCI DSS compliance. The difference between the different types of SOC audits lies while in the scope and duration of the evaluation: Notice- the more TSC classes https://www.nathanlabsadvisory.com/blog/tag/best-practices/