Again, keep in mind that these aren’t “fines” in exactly the same feeling that, say, you’d pay for violating some authorities regulation or traffic law; they’re penalties built right into a contract amongst retailers, payment processors, and card makes. The distinction between the different types of SOC audits lies from https://www.nathanlabsadvisory.com/blog/nathan/empowering-businesses-through-comprehensive-cybersecurity-solutions-the-nathan-labs-approach/