SOC for Cybersecurity and SOC 2 are both AICPA-designed frameworks, but they serve different purposes. SOC 2 evaluates a service organization’s internal controls based on five Trust Service Criteria, mainly for third-party assurance. SOC for Cybersecurity, however, is a broader risk management framework that applies to any organization, providing transparency on its cybersecurity risk... https://www.shaunstoltz.com/