How to make your law firm SOC 2 compliant with minimal headaches