SOC 1 & SOC 2 Preparation Checklist
I’ve been hearing from various people in the marketplace that they were interested in learning about some steps, at a high level, that they need
Menu
I’ve been hearing from various people in the marketplace that they were interested in learning about some steps, at a high level, that they need
SOC Reporting Guide
Introduction SSAE 16 and ISAE 3402 are two widely used auditing standards for service organizations. Many assume SSAE 16 is just the U.S. version of the international ISAE 3402 standard,
While some companies still request a SAS 70 report (why, who knows…), many contracts now require a SSAE 16 report, and with the change to SSAE 18 many are now
The first difference between the SSAE 16 and ISAE 3402 Standards is that SSAE 16 requires the service auditor to assess the risk associated with potential “Intentional Acts by Service
Some organizations have heard of SAS 70, SSAE 16, and now SSAE 18, but, haven’t seen the value, other than because one of their customer require it. Truth is, that’s
SSAE 18 is a series of enhancements aimed to increase the usefulness and quality of SOC reports, now, superseding SSAE 16, and, obviously the relic of audit reports, SAS 70.
User access reviews are a critical control in almost any IT control framework because they help ensure that users have the appropriate level of access to sensitive data and systems.