What tools have been most helpful to gather evidence for a SOC 2 audit?
Like