In April 2016, the American Institute of Certified Public Accountants (AICPA) Auditing Standards Board (ASB) issued the Statement on Standards for Attestation Engagements (SSAE) No. 18, Attestation Standards: Clarification and Recodification, to supersede the former standard SSAE 16.

This course will help you if your organization has the need to obtain or provide a SOC (Service Organization Control) report or if you wonder what changes the new SSAE 18 standard will bring to the process. SSAE 18 is effective for SOC report opinions dated on or after May 1, 2017 and early adoption is permitted. This course focuses on the specific requirements of SSAE18 and highlights changes from SSAE16.

In today’s economic environment, many companies utilize outsourced services to perform varied functions.  These functions can span from payroll and accounts payable to information technology processes or even call center functions.  The list can be endless however these services are often a critical component to the internal control environment of the organization.

A service organization should implement a robust third party vendor management policy, if one is not already in place. Often, initial vetting occurs of the subservice organization however that same diligence is not maintained as the service continues.  It is just as important to ensure that subservice organizations are monitored on an ongoing basis using the methods outlined in SSAE 18.