A SOC 2 attestation relies over the Believe in Services Standards and is particularly provided by a registered CPA agency approved via the AICPA. Generally, a SOC 2 report is valid for any calendar year and the Firm is needed to have interaction the identical or a unique CPA firm https://samacompliance.com/blog/how-to-achieve-sama-compliance-in-saudi-arabia/