If this is your first SOC or SSAE 16, we can work with you to do a full/complete SSAE 16 readiness run through of all controls/areas and provide detail on what needs to be done to pass every test associated with general controls, IT controls and application level controls.

Type I – a Type I is a report on policies and procedures placed in operation as of a specified point in time. SSAE 16 Type I reports evaluate the design effectiveness of a service provider’s controls and then confirms that the controls have been placed in operation as of a specific date

Type II – a Type II is a report on policies and procedures placed in operation and tests of operating effectiveness for a period of time. SSAE 16 Type II reports include the examination and confirmation steps involved in a Type I examination plus include an evaluation of the operating effectiveness of the controls for a period of at least three consecutive calendar months. Most user organizations require their service provider to undergo the Type II level examination for the greater level of assurance it provides