SSAE 16 Services
The purpose of a Statement on Attestation Engagements, No. 16 (SSAE 16) Report is to allow a third-party service organization to demonstrate to its customers that its relevant key internal controls are effectively designed and implemented. The bottom line: Are your customers’ data and assets adequately safeguarded?
Formerly a SAS 70 examination, some changes will be required to report under the new SSAE 16 standard. The biggest change is that management of the service organization must provide a description of its internal controls system along with a written statement of assertion.
Holtz Rubenstein Reminick’s SSAE 16 Services:
PHASE 1: Readiness Assessment
The objective of this phase is to identify any areas of weakness that you may have. We will conduct a gap analysis of the controls and make any necessary recommendations to correct deficiencies or potential problem areas.
PHASE 2: Objectives and Testing
In order to allow user organizations to understand the controls in place, we can offer service organizations a choice of two levels of service:
- Type I Report
Provides an opinion on the fairness of the presentation and description of controls in place and the suitability of their design to achieve the control objectives at a point in time. The report does not provide assurance as to the operating effectiveness of the controls described.
- Type II Report
Includes everything in a Type I report, as well as an opinion on whether the specific controls were operating effectively during the period under review. This is achieved through actual testing of specific controls.
We look forward to working with you on any of the SSAE 16 services we provide. Our risk-based approach, with a focus on relevant key controls, allows us to offer you an effective SSAE 16 engagement.
Contact Holtz Rubenstein Reminick today for immediate assistance.
Paul Becht, CPA
Partner in Charge
Debt Collection Group
Tel. (631) 719-3380