In the audit of an issuer, an SOC 1 Type 2 report (as opposed to an SOC 1 Type 1 report) would normally be obtained because:

Multiple Choice

A. The entity is required to file financial statements with the Securities and Exchange Commission.

B. The entity is required to have an auditors report on internal control over financial reporting.

C. Controls are being implemented at a location physically separate from the issuer.

D. The entity has multiple subsidiaries that require audit attention.