AI-Specific Threat Modeling: Identifying and Mitigating Unique Risks in Machine Learning Systems

Although not mandatory for a SOC 2 audit, conducting penetration testing can be highly beneficial to represent a company's security plan and efficiency.