SSAE 16

In addition to offering companies the leading certification standard for Cloud Computing and Managed Service Providers, the MSPAlliance also has the capability to provide Statement on Standards for Attestation Engagements (SSAE 16) audit reports. While the UCS audit is globally recognized for cloud and managed services excellence, sometimes our members (including their customers) are asked for a SSAE 16 audit. Our approach is unique, in that we can issue a SSAE 16 audit based on the principles and controls embodied in the UCS.

What Makes the MSPAlliance SSAE 16 Program Unique?

By blending the Unified Certification Standard (UCS) and the SSAE 16, the “dual certification” offers cloud computing and managed services companies a cost-effective and comprehensive accreditation that is specific to your profession.

Not all SSAE 16 audit reports are the same. Why? Because, depending on the auditor you get, you may get controls that are not suited to your business model, and more importantly, unimportant to your customers. Getting a SSAE 16 audit report that is based on standards specific to cloud computing and managed services is crucial to providing your customers with the assurance they require.

Our team of trained and experienced global auditors can leverage the UCS to significantly a) decrease the engagement time b) maintain out of control costs, c) apply controls relevant to your business model!

SSAE 16 Overview

The American Institute of Certified Public Accountants (AICPA) and the International Auditing and Assurance Standards Board (IAASB) recently issued new guidelines for an auditor’s report on the controls of a service organization, commonly referred to as a “SAS 70” report. Beginning with reporting periods ending on or after June 15, 2011, reports on controls at those service organizations will be performed in accordance with one of the following new standards:

- Statement on Standards for Attestation Engagements No. 16 (SSAE 16) – Reporting on Controls at a Service Organization, or

- International Standards on Attestation Engagements No. 3402 (ISAE 3402) – Assurance Reports on Controls at a Service Organization.

SSAE 16 is the standard that superseded SAS 70 in the U.S. This set of rules is favored by service organizations with a heavy concentration of their clients based in the U.S. Companies with more global customers may opt to use SSAE 16, but ISAE 3402 could prove to be more beneficial to their clients.

If customers or partners request SSAE16 certification or if you want to know more about the MSPAlliance program, please contact info@mspalliance.com or call 530-891-1340.