ISAE 3402 and SSAE 16 (replacing SAS 70) - Reinforcing confidence through demonstration of effective controls | Brochure


Benefits of the ISAE 3402/SSAE 16 examination

One-stop shopping

Hiring an independent service auditor to perform the review allows the organisation to be subjected to just one internal controls audit. Upon completion, the report is distributed to the service organisation’s users so that their auditors may rely upon its opinion and findings and subsequently limit or eliminate additional substantive audit procedures. It can help:

  • Reduce the impact on your resources by minimising disruption from other outside parties
  • Reduce operating costs for your clients, due to the fact that they will no longer have to send auditors to audit your organisation

A "must have"

With the recent heightened awareness to operational risk management, more and more clients of service organisations are requesting a service organisation control report to provide comfort over the processing control.

The benefits are:

  • Strengthening your organisation’s reputation
  • Assisting in fulfilling your customers’ and their independent auditors audit responsibilities
  • Demonstrating that controls are designed and implemented based on an accepted internal control framework (e.g. COSO)
  • Providing a control environment independent examination under a standard recognised internationally

Risk management tool

ISAE 3402/SSAE 16 reports provide management with greater comfort over the organisation environment and a basis for reliance on controls mitigating your (and your clients') risks with a focus on financial reporting. Training tool

Management can use ISAE 3402/SSAE 16 reports to provide employees with key information about the organisation and how transactions are processed as well as providing with a better understanding of the global objectives of the business and foster control discipline across organisation over control environment soundness.

Assessment tool

ISAE 3402/SSAE 16 reports provide management with an independent assessment of the control procedures’ adequacy and `reasonable assurance´ over the processing control environment operating effectiveness that impacts user entities’ internal control over financial reporting.

It illustrates the positive effects of properly functioning and articulated control environment to an organisation’s senior management and can assist to reduce the likelihood of unwanted surprises:

  • Identifying and documenting your control objectives
  • Analysing the effectiveness of your control activities
  • Helping identify process and technology weaknesses
  • Identifying opportunities for improvement throughout audited operational areas
  • Determining the consistency with which your controls are applied throughout the organisation
  • Standardising the processes among multiple services
  • Assessing the strength of your management oversight

Discover the whole brochure on the PDF attached (English and German version).

Page Last Updated