This site uses cookies to provide you with a more responsive and personalized service. By using this site you agree to our use of cookies. Please read our cookie notice for more information on the cookies we use and how to delete or block them.

Bookmark Email Print page

Benefits of the ISAE 3402 / SSAE 16 examination

One-stop shopping

Hiring an independent service auditor to perform the review allows the organisation to be subjected to just one internal controls audit. Upon completion, the report is distributed to the service organisation’s users so that their auditors may rely upon its opinion and findings and subsequently limit or eliminate additional substantive audit procedures. It can help:

  • Reduce the impact on your resources by minimizing disruption from other outside parties
  • Reduce operating costs for your clients, due to the fact that they will no longer have to send auditors to audit your organisation

A "must have"

With the recent heightened awareness to operational risk management, more and more clients of service organisations are requesting a service organisation control report to provide comfort over the processing control. The benefits are:

  • Strengthening your organisation’s reputation
  • Assisting in fulfilling your customers’ and their independent auditors audit responsibilities
  • Demonstrating that controls are designed and implemented based on an accepted internal control framework (e.g. COSO)
  • Providing a control environment independent examination under a standard recognised internationally

Risk management tool

ISAE 3402/SSAE 16 reports provide management with greater comfort over the organisation environment and a basis for reliance on controls mitigating your (and your clients') risks with a focus on financial reporting.

Training tool

Management can use ISAE 3402/SSAE 16 reports to provide employees with key information about the organisation and how transactions are processed as well as providing with a better understanding of the global objectives of the business and foster control discipline across organisation over control environment soundness.

Assessment tool

ISAE 3402/SSAE 16 reports provide management with an independent assessment of the control procedures’ adequacy and `reasonable assurance´ over the processing control environment operating effectiveness that impacts user entities’ internal control over financial reporting.

It illustrates the positive effects of properly functioning and articulated control environment to an organisation’s senior management and can assist to reduce the likelihood of unwanted surprises:

  • Identifying and documenting your control objectives
  • Analysing the effectiveness of your control activities
  • Helping identify process and technology weaknesses
  • Identifying opportunities for improvement throughout audited operational areas
  • Determining the consistency with which your controls are applied throughout the organisation
  • Standardising the processes among multiple services
  • Assessing the strength of your management oversight


  • Laurent Berliner
    Partner - EMEA Financial Services Industry Enterprise Risk Services Leader
  • Ruth Bültmann
    Partner - Strategy & Corporate Finance
  • Michaël Blaise
    Directeur - Business Risk

Focus on

  • ISAE 3402 and SSAE 16 (replacing SAS 70) - Reinforcing confidence through demonstration of effective controls | Brochure
    In choosing Deloitte as your ISAE 3402/SSAE 16 source, you choose a firm able to offer the services required to address such a multidisciplinary challenge
  • Third party assurance reports - Challenges and opportunities | Podcast
    Discussion on the growing need for third-party assurance reports and related challenges and opportunities.
  • Gouvernance des risques - Adieu SAS 70 et bienvenu ISAE 3402 et SSAE 16 | Press article
    En réponse au développement de la sous-traitance d’activités conjugué à la crise, l’utilisation de rapports d’assurance sur les contrôles de prestataires de services de type SAS70 n’a cessé de s’accroître.



Stay connected:
Get connected
Share your comments
More on Deloitte Luxembourg
Learn about our site

Recently published