Author: admin

SSAE 22 Supersedes SSAE 18, as of June 15, 2022

SSAE 22 was issued a couple years ago, back in December 2020, to supersede AT-C section 210 with three primary changes: Description of the procedures a practitioner may perform in a review engagement: The practitioner is now required to identify areas which a material misstatement could arise, and design and perform procedures to obtain reasonable / limited assurance to support the overall report conclusion, even if it is not a standard analytical test. Some additional permitted testing procedures include: Requirement that the practitioner’s report include an informative summary of the work performed as a basis for the practitioner’s conclusion There is now an additional requirement that requires practitioners to describe in some (not necessarily much..) detail how they reached their conclusions. The AICPA set the bar for this statement at “the procedures we performed were based on or professional judgment and consisted primarily of analytical procedures and inquiries” but allows for something more detailed. But, if not required it is unlikely many firms will go beyond. Permission of the expression of an adverse review conclusion As of SSAE 22, practitioner’s are now required to express an adverse conclusion should they identify sufficient evidence to conclude misstatements, individually or in the aggregate, are both material and pervasive to the subject matter. What does it all mean? Does it matter? For most company’s getting an audit done, not so much. These are primarily changes that auditors need to implement for their practices and really only are applicable to service organizations in the

Read More »

SOC 2 Cheat Sheet

SANS put together a great overview of SOC 2 terminology, report structure breakdown, and process in their signature cheat sheet format. This is a great document to keep handy if you are an auditor, executive, sales person, or whomever that may have to come in contact with a SOC 2 at some point in time. This is slightly outdated as of the Fall 2022 refresh of the SOC 2 but still a very handy item! Click here to download the sheet in PDF

Read More »

Get Our Emails

SOC Reporting Guide

Popular SSAE Resources

SOC 2 Cheat Sheet

SANS put together a great overview of SOC 2 terminology, report structure breakdown, and process in their signature cheat sheet format. This is a great document to keep handy if

Read More »