ISAE 3402 – A Global Standard for a Global Marketplace

As companies emerge in an ever growing global economy newly adopted accounting principles and standards allow potential clients insight into the prospective organization.  The new globally accepted framework, International Standards for Assurance Engagements (ISAE) No. 3402, Assurance Reports on Controls at a Service Organization creates transparency and more clarity when reporting on controls at service organizations.  SAS 70, the standard used globally by many practitioners, was superseded because it had been showing its limitations for a number of years, due in large part that it was a U.S. based standard and was not always meeting the ever-growing and complex reporting requirements for international service organizations. Continue reading “ISAE 3402 – A Global Standard for a Global Marketplace”

Value of the SOC 2 for Service Organizations

If your service organization processes customer transactions that impact financial reporting, such as payroll or other financial reporting function, you are more than likely familiar with the SSAE 16 SOC 1 report and its predecessor the SAS 70. Your customer’s auditors request the SAS 70, now the SSAE 16, every year to fulfill your customer’s year-end financial statement audit requirements. You gladly undergo the annual SSAE 16 audit so you have the report ready for your customers each year. One SSAE16 audit is worth keeping an army of customer auditors from knocking on your door asking for the same evidence of internal controls. More than likely the SSAE 16 is also required to meet contractual obligations to your customers. So to reduce the number of audits you have to endure each year, to meeting contractual obligations and also to get an independent evaluation of your internal controls, you engaged a CPA firm to perform the SSAE 16 audit. Continue reading “Value of the SOC 2 for Service Organizations”