SSAE 16 Readiness- Service Organization Control Reports
If you work for a service provider, odds are you are familiar with your requirement to ensure adequate controls and safeguards [formerly the SAS 70 - AICPA’s Statement of Auditing Standards Number 70]. Essentially, service organizations or service providers must demonstrate that they have adequate controls and safeguards when they host or process data belonging to their clients.
Recent changes by the AICPA clarified the requirements of the SAS 70 by introducing the SSAE 16 and the Service Organization Control Reports (SOC). The SOC requires attestation by a CPA firm but before calling a CPA firm to do the audit, it is critical to make sure you are ready. Vonya Global offers its clients a streamlined SSAE 16 readiness assessment. We can help you decide on a SOC 1, SOC 2, or SOC 3 and whether your require a Type 1 or Type 2. Sounds confusing? Let us help!
To help you get started, the following control areas could be within scope:
- Organization and Administration-Executive Tone
- Organization and Administration-Human Resources
- Systems Development Life Cycle
- Incident Management
- Change Management
- Logical Security
- Network Security
- Physical Security
- Environmental Security
- Computer Operations
- Business Continuity and Disaster Recovery
Spend a fewminutes with our SSAE 16 Compliance Experts to find out how we have helped our clients.
