It troubles suggestions on how to interpret Main principles on the GDPR and may difficulty binding conclusions tackled to the information defense authorities on dispute in concrete situations relating to cross-border processing. The distinction between the differing types of SOC audits lies in the scope and duration with the evaluation: https://www.nathanlabsadvisory.com/blog/author/nathan/page/4/