Information Systems & Risk Assurance Choosing the Right SOC 2 Auditor: Why Experience and Judgment Still Matter Keep Reading