News SOC 2 Penetration Testing Requirements: A Practical Guide for UK Vendors by Rebecca Sutton September 24, 2026 by Rebecca Sutton September 24, 2026 The Trust Services Criteria never mention a pentest by name, yet auditors expect one for every SOC 2 report. Here is what actually drives that expectation. FacebookTwitterLinkedinEmail