Certified Audit Service

Auditor Opinion Letter

A formal opinion from Certified Information Systems Auditors that you can share with customers, insurers, and partners, and a Secure Seal they can verify for themselves.

What an Auditor Opinion Letter Is

A signed statement from a Certified Information Systems Auditor of what was examined, what it was measured against, and what we concluded.

Anyone can send your customers a report. An opinion is different: it is a formal conclusion from an independent auditor, under a professional credential, that a third party can rely on without reading a hundred pages of technical findings. As Certified Information Systems Auditors, we are authorized to issue one at the end of an Altius IT audit, and you can share it with customers, prospects, insurers, partners, and your board.

An envelope closed with a red wax seal, a symbol of a formal, signed assurance

A Letter They Can Read, and a Seal They Can Check

The letter states the conclusion in a page or two. The Secure Seal on your website links to a verification page we host, so anyone can confirm the audit is real and current.

  1. 1
    Period of examinationThe dates the audit work covered.
  2. 2
    ScopeExactly which systems, applications, or programs were examined.
  3. 3
    CriteriaWhat the safeguards were measured against: whether they were appropriate, met the requirements, and operated effectively.
  4. 4
    OpinionOur conclusion, stated plainly.
  5. 5
    SignatureSigned by Altius IT as Certified Information Systems Auditors.
Illustrative layout. Every letter is written for the audit it reports on.
Altius IT Secure Seal
Altius IT Secure SealDisplayed on your website
Security Verification
Organization
Example Company, Inc.
Type of audit
Web application security audit
Date of issue
The date the audit was completed
Valid through
One year from issue

Which Audits Can End in an Opinion Letter

The letter is issued at the end of an Altius IT audit, after the work is done and the findings are addressed. It reports on the audit you chose:

What It Is, and What It Is Not

It is

  • A formal opinion from an independent, certified auditor
  • Specific to a defined scope and period of examination
  • Something you can share without exposing your technical findings
  • Backed by a seal anyone can verify

It is not

  • A certification. No auditor can certify you as “HIPAA compliant” or “secure” for good
  • A SOC 2 report, which only a licensed CPA firm can issue
  • A guarantee about systems or changes outside the scope we examined
  • Permanent. It reflects the period examined and needs renewing

About Altius IT

We are certified by ISACA as Certified Information Systems Auditors (CISA) and Certified in Risk and Information Systems Control (CRISC). Our auditors and senior security engineers evaluate your safeguards and controls to determine whether they are sufficient and effective. Altius IT has been featured in 40+ publications and nationwide media outlets, and works with organizations of every size, from start-ups to some of the most recognized names in their industries.

Contact us and we will help you choose the right audit.

Frequently Asked Questions

It is issued at the end of an Altius IT audit. We perform the audit, you address the findings, and once the results support it, we issue the letter for the scope we examined.

Anyone you choose: customers, prospects, cyber insurers, partners, regulators, and your board. It states the conclusion without exposing your detailed technical findings.

You display the seal on your website. It links to a verification page hosted by Altius IT that shows your organization, the type of audit, the date of issue, and how long it is valid, so visitors can confirm it for themselves.

The letter reflects the period we examined, and the verification page shows a valid-through date, typically one year from issue. Systems change, so most organizations renew with an annual audit.

No. Only a licensed CPA firm can issue a SOC 2 report. An Auditor Opinion Letter is our independent opinion as Certified Information Systems Auditors on the audit we performed. Where a customer specifically requires SOC 2, we handle the readiness work and our CPA partners issue the report.

Other Services