New opportunities for firms in SOC reporting