The need for providers to report on their internal controls has never been greater. Businesses face increasing risks, and many believe their risks increase even further when they rely on processes of third-party organizations.
Controls Testing
Deloitte & Touche LLP
Controls Testing (CT) is a broad set of services focused on evaluating, testing, and reporting on controls within an organization that may be established by management, users, industry practices, and/or regulations. Services include Service Organization Control (SOC) Reports, such as SOC 1, (which has replaced SAS 70), and SOC 2 and SOC 3. Other services include Sarbanes-Oxley readiness and testing, Federal A-123 controls testing, compliance-related examinations, business and technology controls testing, agreed-upon procedures, and consulting services related to preparing for internal control audits
Featured insights
As used in this document, “Deloitte” means Deloitte LLP [and its subsidiaries]. Please see www.deloitte.com/us/about for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. Certain services may not be available to attest clients under the rules and regulations of public accounting.
Dig deeper
Statement on Standards for Attestation Engagements (SSAE) 16 and International Standard on Assurance Engagements (ISAE) 3402- New service organization reporting standards
- A path to excellence in risk management
- SAS 70
- Resources for the Risk Intelligent Enterprise™
- Investment Adviser Custody Rule, Rule 206(4)-2
