SSAE 16 & ISAE 3402

From June 2011 the widely used SAS 70 report on controls at a service organisation was superseded by ISAE 3402 and SSAE 16. ISAE 3402 is an international audit standard and SSAE 16 is an American standard.

When a company outsources an activity that is material to the risks associated with the production of their financial statements or a financial activity, it is essential that the risks associated with that activity are effectively managed.  Both the ISAE 3402 and SSAE 16 reports are designed to provide assurance that financial controls related to outsourced processes are designed and operating effectively. 

Increasingly companies that specialise in managing outsourced processes are required to provide assurance to their clients in the form of a third party assurance certification such as ISAE 3402 or its US equivalent SSAE 16. Such assurance is often required in order to attract new customers or retain existing clients.

Mazars provide a full suite of third party assurance services to clients including;

  • Assistance in developing ISAE 3402 / SSAE 16 documentation
  • ISAE 3402 / SSAE 16 Readiness Assessment
  • ISAE 3402 / SSAE 16 Type 1 Audit
  • ISAE 3402 / SSAE 16 Type 2 Audit
  • SOC 2 and SOC 3 audits
  • Agreed Upon Procedures Report (AUP)