SSAE 16 Readiness Assessments

SSAE 16 Readiness Assessments are conducted to check the level of implementation of the SSAE 16 in an Service Organization. GAP Analysis Study is done during the readiness assessment to find out all gaps in the implementation of the standard SSAE 16. A detailed Gap Analysis report is provided to the organization.

 

Why a SSAE 16 Readiness Assessment is Important?

As we know there many things has changed from the SAS 70, the main reason behind the SSAE 16 Readiness Assessment is the calibration of all the changes required for the new standard as described by the Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants (AICPA).

 

Benefits of the SSAE 16 Readiness Assessments

SSAE 16 Readiness Assessment is conducted for the following benefits:

  • To gain the confidence and understanding about the SSAE 16 standard and its requirements. Its difference, similarity to other standards like SAS 70.
  • Agreement to the Scope of the SSAE 16, controls inclusion, business process controls, transaction processing controls, different locations to include, duration to cover under the SSAE 16 Type 2 Attestation.
  • The role of Internal Audit function to be discussed and deciding about inclusion of its role and responsibilities in the report
  • System description development and validation
  • Identification of all Sub-service Organizations under Carve-Out Method or Inclusive Method
  • Period of the SSAE 16 reporting
  • SSAE 16 Readiness Assessment Questionnaires to be provided to the organization
  • Conducting Gap Analysis and preparing a detailed  gap analysis report
  • Gap analysis report to include the Opportunities for Improvement and the Gaps, so the Service Organization close those gaps before the SSAE 16 Attestation

Preparing for SSAE 16 Type 1 and Type 2 Attestations

SSAE 16 Readiness Assessment helps in baselining the scope of the SSAE 16 engagement. It also provides important inputs on the gaps and weaknesses, opportunities for improvements and suggestion for gap closure.

SSAE 16 Readiness Assessment help in closing the gaps before the actual SSAE 16 Type 1 or SSAE 16 Type 2 audit begins.

Organization may improve or add new policies, procedures, and other documents may be provided to close the gaps found during the Readiness Assessment. DQS may extend help to the service organization for preparing them for SSAE 16 compliance.