At times, testing will result in an audit finding. In SOC reports, audit findings are noted within section IV of the report. Additionally, the final section of the report allows for management to respond to any exceptions or findings noted. These should be reviewed to determine whether processes have been put into place to mitigate the risk of them occurring in the future.