Ssae 18 Certification

Ssae 18 is only the name of the standard used by audit practitioners to perform a variety of attestation.

Ssae 18 certification. There is no such thing as ssae 18 certified and service organizations that use this terminology are merely misleading their customers and stakeholders. Institute of certified public accountants aicpa statement. Ssae 18 is a series of enhancements aimed to increase the usefulness and quality of soc reports now superseding ssae 16 and obviously the relic of audit reports sas 70the changes made to the standard this time around will require companies to take more control and ownership of their own internal controls around the identification and classification of risk and appropriate management of. Type i and type ii.

Neither was ssae 16 or sas 70 that preceded it. Ssae 18 certified data centers are reputable. These changes will be applicable to service auditor reports currently issued under ssae 16 nd reports issued under both ssae16andisae3402standards. There are many principles that all data centers colocation and hosting facilities need to keep in mind when looking to get certified.

Ssae 18 is not a certification. A type 1 report states an opinion that your organizations internal control system is designed suitability to achieve the related control objectives on a specified date. Technically there is no such thing as a ssae 18 certification because a ssae 18 attestation states an auditors opinion on a service organizations internal controls and security practices for a specific period of time. But there are a couple different things a data center needs to do to be ssae 18 certified.

On standards for attestation.