SAS 70 & SSAE 16

Recent Activity

Do cloud vendors have SAS 70 or the new SOC 1,2,3 internal control reports to provide to firms assessing a move to...

Anonymous (Marketing Coordinator)

Could you describe the difference between an assurance standard (ISAE 3402) vs. an attestation standard (SSAE 16)?

Anonymous

When I See a Can in the Road All I Want to do is Smash It

Jon Long (The Risk Assurance Guy - Google Me, CompliancePoint)

Profile

Jon Long

Title: The Risk Assurance Guy - Google Me
Company: CompliancePoint

Right now, the "can" I really want to smash, is the notion that SSAE16 provides assurance about Security, Availability, Processing Integrity, Confidentiality, and Privacy. The AICPA has been clear that SSAE 16 is not designed to provide assurance about...

SAS 70 Being Replaced by SSAE 16

Scott MacDonald (President/Owner, AlphaMac Resources, Inc.)

Profile

Scott MacDonald

Title: President/Owner
Company: AlphaMac Resources, Inc.

What is your company doing, if anything, to prepare for the more stringent requirements of SSAE 16 when it replaces SAS 70 this year? Also, interested to hear how many companies actually obtain a SAS70/SSAE 16?