An auditor is reviewing a SOC 2® report and notices the opinion is 'Qualified'. What does this indicate?

Answer options:

The system description was presented fairly and controls were effective without exception.

One or more controls were not effective, or the description was materially misstated in a specific area, but the system as a whole largely achieved its objectives.

The controls were completely ineffective and objectives were not achieved.

The auditor was unable to obtain sufficient evidence to form an opinion.

How to approach this question

Distinguish between Unmodified (Clean), Qualified (Except for...), Adverse (Fail), and Disclaimer (Can't tell).

Full Answer

B.One or more controls were not effective, or the description was materially misstated in a specific area, but the system as a whole largely achieved its objectives.✓ Correct

A Qualified Opinion is issued when the auditor finds that the system description is fairly presented and controls are effective 'except for' a specific matter (a deviation or deficiency) that is material but not pervasive enough to warrant an Adverse opinion.

Common mistakes

Confusing Qualified (bad in audit terms) with Qualified (good in job terms).

Question 19 All questions Question 21

Practice the full CPA ISC Practice Exam 3

82 questions · hints · full answers · grading

More questions from this exam

Q01A CPA is advising a client who is migrating their legacy on-premise ERP system to a cloud-based s...Medium Q02During a review of a client's cloud governance structure, an auditor notes that the client uses a...Medium Q03An auditor is evaluating the 'Processing Integrity' principle for a financial institution's loan ...Hard Q04A company uses a batch processing system to update inventory records overnight. The 'Grandfather-...Hard Q05During a walkthrough of the change management process, an auditor observes that the 'Developer' r...Medium

View all 82 questions →