https://rahulkavale.github.io/posts/good-practices-enabling-soc2/