Moving to ssae 18.
Ssae 18 control objectives list.
Developing soc 1 ssae 18 control objectives that are related to the icfr concept is critical.
Updated as of january 1 2018 the soc 2 guide provides how to guidance for service auditors performing examinations under ssae 18 clarified attestation standards to report on a service organization s controls over its system relevant to security availability processing integrity confidentiality or privacy.
The aicpa s control objective definition provided in ssae 18 is the aim or purpose of specified controls at the service organization.
1 reporting under section 112 of the federal deposit insurance corporation.
Are necessary to achieve the control objectives stated in management s description of the system when the carve out method of reporting has been used.
A clearer view of attestation standards for service organizations 1.
Control objectives address the risks that controls are intended to mitigate.
Focuses on the impact of ssae 18 on soc 1 examinations and the re codified attestation standards specifically at c section 105 and at c section.