Yes. A C5:2020 audit can be combined with an SOC 2 audit so that parts of the system description and audit results can be used for overlapping controls.