SOC 2 Type II Reports: How to Correctly Assessa Vendor