Introduction When a SOC 2 report is issued, I have seen that in “Description of Tests of Controls and Results of Testing” section, if a control has an exception or a qualification, a ma…