IT Examiner School, Seaside, CA

External Technology Service Provider (TSP) Reviews

• Additional reports examiners may see when reviewing a financial institution’s vendor management program: – SSAE 16 – SOC Reports

SSAE 16

• One of the most common types of audits that you will see is a Statement for Attestation Engagements (SSAE) No. 16 audit.

• SSAE 16 was formally issued in June 2011 to comply with international standards, replacing Statement on Auditing Standards (SAS) No. 70 audits.