SOC 2 Type II cost ranges for B2B SaaS: readiness, observation period, and audit. What drives cost and why first-time audits cost more.