How to evaluate the credibility and quality of a SOC