SSAE 16 Type I Attestation

A Type I (Type 1) service auditor’s report includes the service auditor’s opinion on the fairness of the presentation of the service organization’s description of controls that had been placed in operation and the suitability of the design of the controls to achieve the specified control objectives.

Type I Attestation is performed as-on a particular date.

 

Purpose

The SSAE 16 Type 1 Report helps the organization in providing a detailed report to its users and clients and their auditors regarding the information about the controls that are involved in the financial reporting.

 

Focus of Type I SSAE 16 Assessment

During the SSAE 16 Type 1 Audits, the auditor examines the service organization’s controls for the following:

  • Service Auditor verifies that the system descriptions prepared by the management are accurate and correct.
  • Service Auditor verifies that the design of the controls is suitable to the organization and more specifically to the transaction processing processes
  • Service Auditor verifies that the system descriptions prepared by management represent accurately all relevant aspects of the service organization’s controls that are operational as of the report date.
  • Whether the design of the service organization’s controls provided reasonable assurance that upon satisfactory compliance of the controls, the specified control objectives will be achieved.

 

Content of SSAE 16 Type 1 Audit Report

Report of the SSAE 16 Type 1 Audit contains the following information:

  • Service Auditor’s Report
  • Descriptions of the Systems as prepared by the organization. System description should cover the Description of Controls, Control Environment, Risk Assessment Details, Risk Identified, Communication System Details, Monitoring and Control Processes
  • Details of the user controls are part of the report, so that the user organizations are aware of the controls that they are accountable for as a user of the service.
  • Report also contains other important information supplied by the management of the service organization such as management’s feedback regarding the service auditor’s report.

 

Deliverables from the SSAE 16 Type 1 Audit

Following are the deliverables from a SSAE 16 Type 1 Audit:

  • Service Auditor Report in printed and PDF format