The SSAE16 Auditing Standard


SSAE 16 is an enhancement to the current standard for Reporting on Controls at a Service Organization, the SAS70. The changes made to the standard will bring your company, and the rest of the companies in the US, up to date with new international service organization reporting standards, the ISAE 3402. The adjustments made from SAS 70 to SSAE 16 will help you and your counterparts in the US compete on an international level; allowing companies around the world to give you their business with complete confidence.

SSAE16 is now effective as of June 15, 2011, and if you have not made the necessary adjustments required, now is the time to find a quality provider to discuss the proper steps. All organizations are now required to issue their Service Auditor Reports under the SSAE 16 standards in an SOC 1 Report.

Who Needs an SSAE 16 (SOC 1) Audit?

A service organization’s services are part of an entity’s information system if they affect any of the following:The classes of transactions in the entity’s operations that are significant to the entity’s financial statements. The procedures, both automated and manual, by which the entity’s transactions are initiated, recorded, processed, and reported from their occurrence to their inclusion in the financial statements.The related accounting records, whether electronic or manual, supporting information, and specific accounts in the entity’s financial statements involved in initiating, recording, processing and reporting the entity’s transactions. How the entity’s information system captures other events and conditions that are significant to the financial statements. The financial reporting process used to prepare the entity’s financial statements, including significant accounting estimates and disclosures.If your Company (the ‘Service Organization’) performs outsourced services that affect the financial statements of another Company (the ‘User Organization’), you will more than likely be asked to provide an SSAE16 Type II Report, especially if the User Organization is publicly traded.
Some example industries include:

  • Payroll Processing
  • Loan Servicing
  • Data Center/Co-Location/Network Monitoring Services
  • Software as a Service (SaaS)
  • Medical Claims Processors

What you Need to Know:

Before starting the SSAE 16 process, there are a number of considerations one must take into account that can save considerable time, effort, and money in the long run. Use the following items as a mini checklist for yourself:

  • Does my Company need an SSAE16, or, are we doing it just because someone asked?
  • Reports on the low end can run at least $15,000 a year, will the business lost be less of a burden than the cost of the report itself?
  • Does your company have defined Business Process and IT controls in place, or, will you need assistance developing and implementing them (readiness assessment)?
  • Have you determined the controls in place which affect the outsourced services being provided?
  • Have key stakeholders been defined and included in discussions?

There are many other issues to consider before engaging a CPA firm to help with your SSAE 16, for a more detailed ‘checklist’ – please see The SSAE 16 Checklist

119 comments

  1. Company need an SSAE16 for good!

  2. Nice Work and Very Useful Info. Thanks For Sharing

  3. http://www.holiwallpapers2014.in/
    Free download Holi wallpapers, Beautiful Happy Holi wallpapers,HD Holi wallapapers,Holi wallpapers for facebook,Holi festival wallpapers,photos, pictures & images for your computer desktop,Mobiles,Whatsapp,and tablets

  4. Can anyone please tell me the ssae review cost?? would be much appreciated. Please

  5. Just wish to say your article is as surprising.
    The clearness in your post is just great and i could assume you
    are an expert on this subject.I also have a new blog about obat untuk thalasemia Fine with your permission allow me
    to grab your feed to keep up to date with forthcoming post.
    Thanks a million and please continue the gratifying work.

  6. Thanks for the wonderful topic of the subject he is very wish more fascinating topics

  7. Yatak Odaları takımları teşekkür eder.

  8. Thanks for the great post. SMS marketing is definitely the way of the future!!

  9. Superb!!
    <a href="http://www.theairporttaxi.ca&quot; title="Airport Taxi">Airport Taxi

  10. Hi guy! Your post so great, please keep going.
    I like it thanks a lot!

  11. It's wonderful your infos. Thank you very much

  12. That's a pretty nice posting and the common issue also.. Thanks – Tai game iwin

  13. It's in reality a great and useful piece of information. I am satisfied that you just shared this helpful info with us. Please stay us up to date like this. Thank you for sharing.