NewsPenetration Testing Does SOC 2 Type II Require Penetration Testing? · December 20, 2022 · 2 min read While it is not necessary to perform penetration testing to obtain SOC 2 compliance, controls must be in place to detect and prevent unwanted access to systems, apps, and data.