This article runs a composite case framework against a mortgage fund whose subservicer received a qualified opinion on the SOC 1 Type II audit. The case framework runs against the fund’s own financial-statement audit, the regulator framework, and the lender-investor base, and runs the corrective framework against each. The facts run as a composite based on common subservicer audit findings and do not represent any specific party.
The fund and the subservicer arrangement
The fund ran a portfolio of business-purpose mortgage loans against a Reg D 506(b) lender-investor base under an Investment Company Act §3(c)(5)(C) real-estate exception. The fund ran the subservicing arrangement under a Subservicing Agreement against 12 CFR §1024.31. The subservicer ran the mechanical execution against the borrower — payment posting, escrow administration, borrower communications, and investor-reporting remittance — under the Subservicing Agreement’s service-level framework. The fund’s financial-statement auditor ran the prior-year SOC 1 Type II report into the fund’s audit framework under AS 2601 service-organization audit standards.
The SOC 1 qualified opinion
The subservicer’s SOC 1 Type II auditor ran a qualified opinion on the operating-effectiveness framework. The qualification ran against three control objectives — the trust-account three-way reconciliation framework, the loan-level payment application framework, and the escrow analysis framework. The auditor found exceptions on each control objective across the testing window. The qualified opinion ran the SOC 1 Type II report outside the unmodified opinion standard and into the fund’s audit framework as a service-organization finding.
Impact on the fund’s financial-statement audit
The fund’s financial-statement auditor ran the qualified SOC 1 Type II opinion into the fund’s own audit framework. The fund’s auditor ran the three-way reconciliation exceptions into the fund’s cash and trust-asset framework, ran the payment-application exceptions into the fund’s revenue-recognition framework, and ran the escrow-analysis exceptions into the fund’s borrower-liability framework. The fund’s auditor extended the audit procedures against the subservicer — substantive testing on the loan-level balance, alternative procedures on the trust-account framework, and direct confirmation against a sample of the lender-investor base on the investor-reporting accuracy framework. The extended audit ran the fund’s audit cost against the engagement budget and ran the audit timeline against the K-1 issuance cycle to the lender-investor base.
The corrective framework
The fund and the subservicer ran the corrective framework against the three exception areas. The three-way reconciliation framework ran the corrective cycle against the monthly bank statement, control record, and beneficiary ledger reconciliation, with a documented sign-off framework against the subservicer’s compliance officer. The loan-level payment application framework ran the corrective cycle against a documented hierarchy — accrued interest, then principal, then escrow, then late fees — and ran the application framework against the subservicer’s servicing-platform configuration. The escrow analysis framework ran the corrective cycle against the annual escrow analysis under 12 CFR §1024.17 and ran the analysis framework against the subservicer’s escrow-administration platform.
The investor-communication framework
The fund ran the investor-communication framework against the lender-investor base on the SOC 1 qualification. The fund manager ran a written communication to the lender-investor base on the qualified opinion, the impact on the fund’s financial-statement audit, the corrective framework against the subservicer, and the timeline against the corrective cycle. The fund ran the lender-investor base on the corrective framework against the operating-agreement transparency framework and ran the corrective cycle against the next year’s SOC 1 Type II engagement.
The lesson
The fund auditor ran four lessons against the engagement. First, the SOC 1 Type II opinion runs against the operating-effectiveness window, and a qualified opinion runs into the fund’s own audit framework as a service-organization finding. Second, the fund runs the audit-rights framework against the subservicer on the annual cycle — the on-site or virtual audit framework runs against the subservicer’s loan files, trust-account records, and compliance documentation. Third, the fund runs the corrective framework against the subservicer on a documented timeline and runs the communication framework against the lender-investor base. Fourth, the fund runs the subservicer-replacement framework against the Subservicing Agreement’s deboarding protocol where the corrective framework runs outside the agreed cycle.
Related Topics
- Mortgage Fund Subservicing Done Right
- Multi-Lender Notes With Up to 10 Investors
- Fidelity Bonds for Trust Account Signatories
- California Threshold-Broker §10232.4 CPA Inspection Trigger
- Fractional Note Distributions: The Pro-Rata Math
This article is educational and does not constitute legal advice. The mortgage fund subservicing framework runs under 12 CFR §1024.31 — RESPA Regulation X — and runs against federal frameworks including the GLBA Safeguards Rule under FTC 16 CFR §314 and the Investment Company Act §3(c)(5)(C) real-estate exception. State frameworks run against the California Department of Real Estate §10145 trust-fund framework and the equivalent state-level frameworks against the subservicer’s licensure. Consult qualified legal counsel and a qualified fund administrator on any specific fund portfolio.
Sources
- 12 CFR §1024.31 — RESPA Regulation X Definitions. Consumer Financial Protection Bureau.
- AICPA SSAE 18 — SOC 1 and SOC 2 Service Organization Control reporting. American Institute of Certified Public Accountants.
- FTC 16 CFR §314 — Standards for Safeguarding Customer Information. Federal Trade Commission.
- Investment Company Act §3(c)(5)(C) — Real Estate Exception. Securities and Exchange Commission.
- California Business and Professions Code §10145 — Trust fund handling. California Legislative Information.
