Your bank informs us that there have been unauthorized transfers concerning your PayPal account as well as your banking account This enables all businesses—from substantial corporations to startups and small and medium enterprises, which can not possess the requisite security infrastructure and staff members—to remain shielded and PCI DSS compliant. https://www.nathanlabsadvisory.com/blog/nathan/understanding-soc-2-a-guide-to-compliance-and-reporting/