OUR THOUGHTS ON:

What's the Difference? SSAE 16 vs. SAS 70

SSAE 18/SOC

By Holly Russo

In April 2010, the AICPA issued Statement on Standards for Attestation Engagements (SSAE) 16, titled Reporting on Controls at a Service Organization, which supersedes SAS 70. Effective June 15, 2011, all service audit reports must be issued in accordance with SSAE 16.

Audits performed in accordance with SSAE 16 will not be significantly different from the current SAS 70 standard. Key differences include the following:

• Requirement of a “management assertion” section within the report - Under SSAE 16, management of service organizations are required to provide a written assertion in the body of the report about the fair presentation of the description of the service organization’s system, the suitability of the design of the controls and, for Type 2 reports, the operating effectiveness of the controls. If a service organization uses subservice organization(s) and elects to use the inclusive method, the subservice organization(s) assertion must also accompany the auditors’ report. Management’s assertion must also specify the criteria used for its assessment. These assertions are similar in nature to SAS 70 audit management representation letters. A separate management representation letter is also still required.

• For Type II reports, the service auditors’ opinion on fair presentation of the system and suitability of design will be for the period covered by the report. Under SAS 70, this is currently as of a point in time.

While these are the most significant differences, SSAE 16 contains other differences that need to be fully understood by service organizations and service auditors by reviewing the standard in detail. 

Schneider Downs provides accountingtax, wealth management and business advisory services through innovative thought leaders who deliver the expertise to meet the individual needs of each client. Our offices are located in Pittsburgh, PA and Columbus, OH. 

This advice is not intended or written to be used for, and it cannot be used for, the purpose of avoiding any federal tax penalties that may be imposed, or for promoting, marketing or recommending to another person, any tax-related matter.

You’ve heard our thoughts… We’d like to hear yours

The Schneider Downs Our Thoughts On blog exists to create a dialogue on issues that are important to organizations and individuals. While we enjoy sharing our ideas and insights, we’re especially interested in what you may have to say. If you have a question or a comment about this article – or any article from the Our Thoughts On blog – we hope you’ll share it with us. After all, a dialogue is an exchange of ideas, and we’d like to hear from you. Email us at contactSD@schneiderdowns.com.

Material discussed is meant for informational purposes only, and it is not to be construed as investment, tax, or legal advice. Please note that individual situations can vary. Therefore, this information should be relied upon when coordinated with individual professional advice.

© 2018 Schneider Downs. All rights-reserved. All content on this site is property of Schneider Downs unless otherwise noted and should not be used without written permission.

comments