SOC2 requires to ensure all computers have the software updates installed. While certification apps can check every desktop with a monitor, ABM could just do it and enforce it.

SOC2 also encourages SSO.