SSAE-18

The Service Organization Controls Report is also SSAE stands for Statement on Standards for Attestation Engagements, managed by The American Institute of Certified Public Accountants (AICPA) and, more precisely, the Auditing Standards Board (ASB).

According to the AICPA, “Service Organization Control (SOC) reports are internal control reports on the services provided by a service organization providing valuable information that users need to assess and address the risks associated with an outsourced service.” In short, if you work for a service firm and handle information for clients that might affect their financial reporting, you could be expected to have this type of audit report.

Additionally, SSAE has three types of Audits named SOC 1, SOC 2 & SOC 3. Each has three different application & serve another purpose.

SOC1 is relevant to Financial Systems in the Organization.

SOC2 is relevant to the Security Controls of the Organization.

SOC3 is for Cyber trust and System trust, intended mainly for the security of web-based applications in Organizations.

Additionally, SSAE 18 comprises two forms of audits. There are two types of SOC audit reports:

Type I – The controls in this form of audit, also known as point-in-time reports, are tested as a given date and include a description of the service organization’s system. Type I reports looking at the design of a service organization’s controls, not how successful they are in practice. Most businesses receive a Type I report once before moving on to a Type II assessment.

Type II – This report spans a period (usually 12 months), includes a description of the service organization’s system, and evaluates the controls’ design and operational effectiveness.

CUNIX’s innovative approach to SSAE involvement adds long-term value to your company. Our readiness services enable you to quickly close control gaps, which not only helps you get SSAE 18 reports signed, but also improves company productivity and efficiency for that is our highest priority. Regular certifications and involvement mean that your business processes are always evolving and updated, adding value to your company.

CUNIX has been providing expertise to many organizations for SSAE 18 audits. Whether at the account level or Organization level, we ensure that your firm is SSAE 18 certified.