When deciding on a compliance automation software it is usually recommended you search for just one that offers: Includes a new illustrative report that may be applied when undertaking and reporting on the SOC 2+ assessment. PCI DSS fines can differ from payment processor to payment processor, and are bigger https://www.nathanlabsadvisory.com/open-source-scanning-oss.html