What is SSAE 16 Type II certification?
SSAE is an internationally recognized standard developed by the American Institute of Certified Public Accountants (AICPA). The SSAE 16 Type II compliance designates that the host delivers reliable and secure operating environments with the proper controls for conducting high-availability data center operations.
What is a SAS 70 letter?
SAS 70 is an acronym for the American Institute of Certified Public Accountants (AICPA) Statement on Auditing Standard (SAS) 70, titled “Reports on the Processing of Transactions by Service Organizations”.
What is the difference between SAS 70 and SSAE 16?
SAS 70, Cruising with The Auditing Standard What’s the difference between SSAE 16 and SAS 70? One of the key differences between the SAS 70 and the SSAE 16 is that the SAS 70 is an “auditing” standard, whereas the SSAE 16 is an “attestation”.
What is SAS 70 Type II?
SAS 70 Type II / SSAE 16 is an auditing statement or report (not a certification) that is conducted by a neutral third party auditing firm for the purpose of providing transparency to the customer/prospect as to what exactly service company (or hosting company in this case) is doing.
Why is SSAE 16 important?
Improve controls and business processes – SSAE 16s can help identify security weaknesses and gaps in internal control. If issues are identified during the examination, a service organization can improve their controls and/or business processes by remediating any identified issues.
Is SAS 70 the same as SOC 1?
The SOC 1 report was previously called the SAS 70 (Statement on Auditing Standards 70) and was eventually replaced by the Statement on Standards for Attestation Engagements no. 16 (SSAE 16). SOC 1 offers both Type 1 and Type 2 (also written as “Type ii”) reports.
What are SAS 70 reports?
A SAS 70 security audit is a detailed report by a certified public accountant (CPA) or a licensed public accounting firm. Either the CPA or the firm must perform the audit according to specific industry standards regarding the planning, execution, and supervision of the audit.
What is SAS 70 called now?
Statement on Standards for Attestation Engagements
SAS no. 70 has been divided and replaced by two new standards. One is a Statement on Standards for Attestation Engagements (SSAE) also known as an attestation standard; the other is a SAS (an auditing standard).
What is a SAS 70 report now called?
BY JUDITH M. SAS no. 70 has been divided and replaced by two new standards. One is a Statement on Standards for Attestation Engagements (SSAE) also known as an attestation standard; the other is a SAS (an auditing standard).
Does SAS 70 still exist?
SAS no. 70 has been divided and replaced by two new standards. One is a Statement on Standards for Attestation Engagements (SSAE) also known as an attestation standard; the other is a SAS (an auditing standard).