Enter to open, tab to navigate, enter to select
SSAE 18
Practical Law Glossary Item w-025-7930 (Approx. 3 pages)
Glossary
SSAE 18
Also known as Statement on Standards for Attestation Engagements (SSAE) No. 18, Attestation Standards: Clarification and Recodification. An internationally recognized accounting standard issued by the Auditing Standards Board of the American Institute of Certified Public Accountants (AICPA). SSAE 18 replaced SSAE 16 for service auditor reports for periods ending on and after May 1, 2017. SSAE 16 replaced SAS 70 for service auditor reports ending on and after June 15, 2011.
SSAE 18 applies to reports issued by the auditor (service auditor) of a service organization that provides services to a user organization (user) and whose controls are relevant to the internal controls over financial reporting (ICFR) of the user. There are three types of SSAE 18 service organization control (SOC) reports:
- SOC 1, also known as Report on Controls at a Service Organization Relevant to User Entities’ Internal Control over Financial Reporting.
- SOC 2, also known as Report on Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality or Privacy.
- SOC 3, also known as Trust Services Report for Service Organizations.