Introduction When a SOC 2 report is issued, I have seen that in “Description of Tests of Controls and Results of Testing” section, if a control has an exception or a qualification, a management response is included.  It explains how […] ↓ Read the rest of this entry…