When a SOC 2 report is issued, in "Description of Tests of Controls and Results of Testing" section, if a control has an exception or a qualification, a management response is included that talks about how the exception or the qualification risk is being managed. This podcast highlights the issues of doing so.
Music:
Ice Cream
(http://freemusicarchive.org/music/Leo_Rossa/Ice_Cream/Leo_Rossa_-_Ice_Cream)
by
Leo Rossa
(http://freemusicarchive.org/music/Leo_Rossa)