SSAE 16
SSAE 16 refers to Statement on Standards for Attestation Engagements (SSAE) 16 is an auditing standard for service organizations, superseding SAS 70. The latter’s ‘service auditor’s examination’ is replaced by a ‘Service Organization Controls’ (SOC) report. SSAE 16 was issued in April 2010, and became effective in June 2011; many organizations which followed SAS 70 have now shifted to SSAE 16. Service providers are viewing the ability to use the SSAE 16 report status to show that they are fully capable, and are also encouraging their prospective end-users to make having a SSAE 16 standard part of new vendor selection criteria.
