Skip to main content
a promotional graphic telling you that PCI Compliance is no longer an annual exercise and that continuous monitory must be built in
Category: Audit & Certification

Qualified Opinion

Also known as: Qualified Audit Opinion, Except-for Opinion
Simply put

A qualified opinion is a conclusion an auditor reaches when a company's financial statements are largely reliable but contain a specific problem, such as a material misstatement or a limitation on what the auditor could examine. It signals that the statements are fairly presented "except for" that identified issue, which is significant but not widespread enough to undermine the statements as a whole. It sits between a clean (unqualified) opinion and more serious outcomes such as an adverse opinion or a disclaimer.

Formal definition

A qualified opinion is a modified audit opinion in which the auditor concludes that, except for the effects (or possible effects) of a specific matter, the financial statements present a true and fair view, or are fairly presented, in all material respects. It is generally issued where the auditor identifies a misstatement, or is unable to obtain sufficient appropriate audit evidence, and judges the resulting effect to be material but not pervasive to the financial statements taken as a whole; the auditor states the basis for the qualification in the report. This contrasts with an unqualified (unmodified) opinion, where no such matter exists, and with an adverse opinion or disclaimer of opinion, which apply where identified effects are both material and pervasive. The specific form, wording, and threshold criteria are governed by applicable auditing standards, which differ across jurisdictions and frameworks; readers should verify the precise requirements against the relevant current standards, as this entry does not address the detailed reporting mechanics or jurisdiction-specific variations.

Why it matters

A qualified opinion is a meaningful signal to anyone relying on a company's financial statements. Unlike a clean (unqualified) opinion, it tells readers that the auditor found a specific, material problem — either a misstatement or an inability to obtain sufficient appropriate audit evidence — that they judged significant enough to flag. At the same time, because the issue is material but not pervasive, a qualified opinion stops short of the more serious adverse opinion or disclaimer of opinion. For investors, lenders, regulators, and counterparties, understanding where a qualified opinion sits on this spectrum is essential to interpreting the reliability of the numbers.

Who it's relevant to

Auditors and audit firms
Auditors must exercise professional judgment in deciding whether an identified matter is material but not pervasive — the threshold that distinguishes a qualified opinion from an adverse opinion or disclaimer — and in clearly stating the basis for the qualification in the report. Because the detailed reporting mechanics and threshold criteria vary by applicable auditing standard and jurisdiction, practitioners should apply the relevant current standards rather than a generic formulation.
Investors and lenders
Those relying on financial statements to make decisions need to interpret a qualified opinion correctly. It indicates the statements are largely reliable but contain a specific, identified problem, and it is less severe than an adverse opinion or disclaimer. Reading the stated basis for the qualification helps clarify the nature and scope of the issue.
Company management and finance teams
Management should understand what triggers a qualified opinion — a material misstatement or a limitation on the evidence available to the auditor — and how it differs from a clean opinion. This helps in assessing what an identified matter signals about the financial statements and in engaging with the auditor on the basis for the modification.
Regulators and oversight bodies
Bodies that monitor financial reporting and audit quality rely on the distinctions between opinion types to gauge the reliability of reported figures. A qualified opinion flags a material but contained issue, distinct from the more serious signals conveyed by an adverse opinion or disclaimer.

Inside Qualified Opinion

Basis for Qualified Opinion
A dedicated section, generally placed immediately before the opinion paragraph, that describes the specific matter giving rise to the qualification and, where practicable, quantifies its financial effects. The precise placement and heading requirements depend on the applicable auditing or assurance standards under which the engagement is conducted.
Scope Limitation or Misstatement Trigger
A qualified opinion generally arises from one of two circumstances: the auditor was unable to obtain sufficient appropriate evidence about a particular item (a scope limitation), or identified a misstatement or departure from the applicable framework. In either case the effect is judged to be material but not pervasive to the subject matter as a whole.
'Except For' Language
The opinion paragraph typically expresses the conclusion using qualifying wording such as 'except for the effects of the matter described,' signalling that the auditor's conclusion is otherwise unmodified. The exact phrasing is prescribed by the standards governing the engagement and should be verified against the current authoritative text.
Materiality and Pervasiveness Assessment
The judgment that distinguishes a qualified opinion from an adverse opinion or a disclaimer. A qualified opinion reflects a matter that is material but confined in effect; when a matter is both material and pervasive, a different form of modified conclusion generally applies.
Applicable Reporting Framework Reference
Identification of the criteria or financial reporting framework against which the subject matter was evaluated, since the qualification is expressed relative to whether the subject matter conforms to that framework in all material respects except for the identified matter.

Common questions

Answers to the questions practitioners most commonly ask about Qualified Opinion.

Does a qualified opinion mean the audit failed or that the organization is non-compliant?
No. A qualified opinion is not a failing grade and does not by itself establish non-compliance. It generally means the auditor concluded that the subject matter is fairly presented or that controls are suitably designed and operating effectively, except for one or more specific matters that are material but not pervasive. The exceptions are scoped and described rather than undermining the report as a whole. How stakeholders interpret the significance of those exceptions is a matter of judgment and depends on the nature of the qualification. This is a general description; the meaning in any given engagement depends on the applicable attestation standard and the facts, and readers should review the actual report language.
Is a qualified opinion the same as an adverse opinion or a disclaimer of opinion?
No, these are distinct outcomes and should not be conflated. A qualified opinion identifies specific exceptions that are material but not pervasive, leaving the rest of the auditor's conclusion intact. An adverse opinion generally indicates that identified issues are so pervasive that the subject matter as a whole cannot be relied upon. A disclaimer of opinion generally means the auditor was unable to obtain sufficient evidence to form any opinion, so no conclusion is expressed. The precise definitions and thresholds derive from the applicable professional attestation or auditing standards, which are periodically revised; verify against the current authoritative text and the specific report.
How should we respond when we receive a report containing a qualified opinion?
As an informational matter, organizations generally review the basis-for-qualification section to understand exactly which matters the auditor identified, whether they relate to control design, operating effectiveness, or scope limitations, and how material they are to the users of the report. Common practical steps include developing a remediation plan for the identified matters, documenting management's response, and communicating context to affected stakeholders such as customers or partners who rely on the report. The appropriate response is fact-specific, and how to handle a particular qualification calls for professional judgment rather than a fixed formula.
How might a qualified opinion affect reliance by customers or other third parties?
Third parties who rely on an attestation report, such as those using it for vendor due diligence, generally read the qualification to assess whether the identified exceptions touch controls relevant to their own risk concerns. A qualification that affects a control area central to a customer's requirements may carry more weight for that customer than one that does not. Because reliance is contractual and risk-based rather than governed by a single universal rule, the effect varies by relationship and by the specific matters qualified. Users typically evaluate the report in the context of their own risk tolerance and any contractual obligations.
What is typically the difference between the basis-for-qualification section and the opinion itself?
In most attestation and audit reports, the opinion paragraph states the auditor's overall conclusion, including the phrase indicating that it is expressed except for the qualified matters. A separate basis-for-qualification section generally describes those matters in more detail, explaining what was identified and why it led to the qualification. Reading both together is generally necessary to understand the scope and effect of the qualification, since the opinion paragraph signals that a qualification exists while the basis section provides the specifics. The exact structure follows the applicable reporting standard, which may be updated over time.
Can a qualified matter be remediated so that a future report reflects an unqualified opinion?
In many cases, matters underlying a qualification can be addressed before a subsequent reporting period, and a later report may reflect an unqualified conclusion if the auditor determines the issues have been resolved and evidence supports that conclusion. Whether and when this occurs depends on the nature of the exception, the length of the period the auditor evaluates, and the sufficiency of remediation. For reports covering a period of time, demonstrating that a control operated effectively throughout the relevant period may require sustained evidence rather than a single point-in-time fix. Outcomes are engagement-specific and rest on the auditor's professional judgment.

Common misconceptions

A qualified opinion means the financial statements or subject matter are unreliable or that the entity has failed.
A qualified opinion generally indicates that, apart from one specific material matter, the subject matter conforms to the applicable framework. It is distinct from an adverse opinion, which conveys that the subject matter as a whole is materially misstated, and from a disclaimer, which conveys an inability to form any opinion. The distinction turns on materiality and pervasiveness, not on overall organizational health.
A qualified opinion is a form of compliance certification or a statement that the entity meets a particular standard.
An audit opinion is the outcome of an assurance engagement expressing a conclusion about subject matter against stated criteria; it is not the same as certification against a voluntary standard. Certification is issued by an accredited body under a defined scheme, whereas an opinion is the professional judgment of the auditor and does not confer certified status.
The rules and wording for a qualified opinion are the same everywhere.
The specific structure, headings, and language depend on the auditing or assurance standards applicable to the engagement, which vary by jurisdiction and by whether the engagement is a financial statement audit or another form of assurance. Practitioners should confirm the requirements under the standards actually governing their work.

Best practices

Clearly document in the basis section the specific matter giving rise to the qualification, and quantify its effect where practicable, so readers can understand the scope and limits of the qualification.
Assess and document whether the matter is material but not pervasive, since this judgment determines whether a qualified opinion is appropriate rather than an adverse opinion or a disclaimer.
Verify the required opinion wording and report structure against the current version of the auditing or assurance standards applicable to the engagement and jurisdiction, as these are periodically amended.
Keep the concepts of opinion, certification, and assessment distinct in communications, and avoid describing a qualified opinion as certification or as a pass/fail compliance outcome.
Communicate the nature and effect of the qualification to those charged with governance, distinguishing the isolated matter from the auditor's conclusion on the subject matter as a whole.
Treat each qualification as fact-specific, applying professional judgment to the particular circumstances rather than relying on a generic template, and confirm interpretation against authoritative sources.
Digital advertisement promoting the whitepaper “The State of Application Security in Modern Software,” showing the cover f the whitepaper and text highlighting AppSec risks, AI code threats, API vulnerabilities, and a button to download the whitepaper.