SSAE 16 was built upon the ISAE 3402 framework, which essentially is the same thing, but accepted at an international level with a number of deviations to be discussed here over time. The AICPA and other standard settings organizations are now encouraged to design their frameworks for reporting on controls at a service organization around the ISAE 3402 framework, this will allow for increased fluidity and lower expenses to complete globally. ISAE 3402 was intentionally designed to allow for minor modifications to adjust for local protocols and existing frameworks.
SSAE 16 contains 9 deviations from the ISAE 3402 framework, at a high level include:
- 1. Intentional Acts by Service Organization Personnel
- 2. Anomalies
- 3. Direct Assistance
- 4. Subsequent Events
- 5. Statement Restricting Use of the Service Auditor’s Report
- 6. Documentation Completion
- 7. Engagement Acceptance and Continuance
- 8. Disclaimer of Opinion
- 9. Elements of the SSAE Report That are Not Required in the ISAE 3402 Report
These topics will be delved into in greater depth at a later time, however, are not of concern if you do not plan on performing outsourcing services for an organization located outside of the United States.
Tags: (isae3402 or ssae16) & part2, isae 16, ISAE 3402, isae 3402 ssae 16, isae 3402 vs ssae 16, isae vs ssae, isae3402 ssae16, isae3402 vs ssae16, ssae 16 framework, ssae 16 isae 3402, ssae 16 vs isae 3402, ssae vs isae, ssae16 and isae 3402, ssae16 isae 3402, ssae16 vs isae 3402, ssae16 vs isae3402
ISAE 3402 framework
SSAE 16 (Auditing Standard) will help you and your counterparts in the US compete on an international leve