SSAE 16

In addition to offering companies the MSP/Cloud Verify examination, the MSPAlliance also has the capability to provide Statement on Standards for Attestation Engagements (SSAE 16) audit reports. While the MSP/Cloud Verify certification is globally recognized for cloud and manage service excellence, sometimes our members (including their customers) are asked for a SSAE 16 audit. Our approach is unique in that we can issue a SSAE 16 audit based on the principles and controls embodied in the MSP/Cloud Verify program.

By blending the MSP/Cloud Verify program and the SSAE 16 together, this “dual certification” offers companies a cost-effective and comprehensive audit that is specific to your profession.

Not all SSAE 16 audit reports are the same

Why? Because, depending on the auditor you use, you may get controls that are not suited to your business model, and more importantly, unimportant to your customers. You may also get an auditor that is really good at accounting but has little knowledge about managed services specific technologies, processes, and service delivery characteristics. Getting a SSAE 16 audit report that is based on standards specific to cloud computing and manage service is crucial to providing your customers with the assurance they require.

Our team of trained and experienced global auditors can leverage the MSP/Cloud Verify  to significantly

  • a) decrease the engagement time
  • b) maintain out of control costs
  • c) apply controls relevant to your business model!

SSAE 16 Overview

The American Institute of Certified Public Accountants (AICPA) and the International Auditing and Assurance Standards Board (IAASB) recently issued new guidelines for an auditor’s report on the controls of a service organization, commonly referred to as a “SAS 70” report. Beginning with reporting periods ending on or after June 15, 2011, reports on controls at those service organizations will be performed in accordance with one of the following new standards:

- Statement on Standards for Attestation Engagements No. 16 (SSAE 16) – Reporting on Controls at a Service Organization, or

- International Standards on Attestation Engagements No. 3402 (ISAE 3402) – Assurance Reports on Controls at a Service Organization.

SSAE 16 is the standard that superseded SAS 70 in the U.S. This set of rules is favored by service organizations with a heavy concentration of their clients based in the U.S. Companies with more global customers may opt to use SSAE 16, but ISAE 3402 could prove to be more beneficial to their clients.

If customers or partners request SSAE 16 audit or if you want to know more about the MSPAlliance program, please contact info@mspalliance.com or call 530-891-1340.