The differences between SOC reports, what to do with them, 3 areas to pay extra attention to, using SOC reports for initial due diligence and ongoing vendor risk management.