SSAE 16 Examinations

Third-party service organizations may be expected or contractually obligated to verify the effectiveness of their controls over activities affecting their user organizations' financial statements. Independent attest examinations based on the American Institute of Certified Public Accountants’ (AICPA) Statement on Auditing Standards No. 70 (SAS 70) previously were used for this purpose.

However, the AICPA has issued a new standard, U.S. Statement on Standards for Attestation Engagements 16 (SSAE 16). SSAE 16 supersedes SAS 70 beginning with reporting periods ending on or after June 15, 2011 and may have an impact as early as July 1, 2010, for service organizations that had been issuing a SAS 70 covering a 12-month period.

Click here to view, “Transitioning from SAS 70 to SSAE 16: What You Need to Know,” an article summarizing the key differences between SAS 70 and SSAE 16.

BKD’s IT Risk Services team is here to assist you, whether you are preparing for your first review or making the transition from SAS 70 to SSAE 16. Our experienced consultants have been helping service organizations refine their processes and improve controls for years. We are well versed in the similarities and differences between the two standards and are ready to provide the services you need.

Cindy Boyle

Partner

IT Risk Services

Cindy Boyle

Partner

IT Risk Services

Not-for-Profit & Government, Not-for-Profit & Government, Financial Services, Inf, Comm & Entertainment

400 W. Capitol Avenue, Suite 2500

P.O. Box 3667

Little Rock, AR 72203-3667 (72201)

Little Rock
501.372.1040

Rod Walsh

Director

IT Risk Services