Cyber risk and voluntary Service Organization Control (SOC) audits · Study