more-arw search

Q&A Forum

What is the smallest sized company that has to conform to the new AICPA SSAE16 standards?

This question was asked by an attendee at a recent Proformative SAS 70/SSAE 16 event: What is the smallest sized company that has to conform to the new AICPA SSAE16 standards?


Sam Wholley
Title: Consultant
Company: Frank, Rimerman + Co. LLP
(Consultant, Frank, Rimerman + Co. LLP) |

Size doesn't matter here - what matters is the relevance of the service organization to the user's operating environment and, for SSAE 16, to the user's financial statements. If a very small company has a material impact on many other small companies' environment, the SSAE 16 is an applicable report. If the company would like to grow, mid-sized and larger companies will look to make sure that their existing control environments will not be weakened by integrating the service provider into their organization's processes.

Jon Long
Title: The Risk Assurance Guy - Google Me
Company: CompliancePoint
(The Risk Assurance Guy - Google Me, CompliancePoint) |

One person...because the AICPA SSAE 16 standard applies to CPAs not service organizations. Was that a trick question?

Topic Expert
Scott MacDonald
Title: President/Owner
Company: AlphaMac Resources, Inc.
(President/Owner, AlphaMac Resources, Inc.) |

In my view, the SSAE 16 reports (used to be SAS70) is primarily an auditor to auditor communication. It is used by the "user" organization to determine the amount of audit work that needs to be conducted on the "supplier" system/service if any.


Get Free Membership

By signing up, you will receive emails from Proformative regarding Proformative programs, events, community news and activity. You can withdraw your consent at any time. Contact Us.

Business Exchange

Browse the Business Exchange to find information, resources and peer reviews to help you select the right solution for your business.

Learn more

Contribute to Community

If you’re interested in learning more about contributing to your Proformative community, we have many ways for you to get involved. Please email [email protected] to learn more about becoming a speaker or contributing to the blogs/Q&A Forum.