During the SOC 2 Audit time period: The audit time period only starts when the many controls are set up and all aspects of information security are carrying out as made. The corporate finalizes the CPA organization or unbiased auditors As well as in collaboration, they come to a decision https://samacompliance.com/blog/how-to-achieve-sama-compliance-in-saudi-arabia/