Studio Guggino and Newtonpartner S.r.l. a team of professionals at the service of your Company

Similar documents
A SERVICE ORGANIZATION S GUIDE SOC 1, 2, & 3 REPORTS

Weighing in on the Benefits of a SAS 70 Audit for Third Party Administrators

Understanding and Evaluating Service Organization Controls (SOC) Reports

SAS 70 & SSAE 16: Changes & Impact on Credit Unions. Agenda

ISACA Cincinnati Chapter March Meeting

C22: SAS 70 Practices and Developments Todd Bishop, PricewaterhouseCoopers

Assessment and Compliance with Sarbanes-Oxley (SOX) Requirements DataGuardZ Whitepaper

SOC for cybersecurity

The SOC 2 Compliance Handbook:

ADVANCED AUDIT AND ASSURANCE

California ISO Audit Results for 2011 SSAE 16 & Looking Forward for 2012 December 15, 2011

Workday s Robust Privacy Program

Transitioning from SAS 70 to SSAE 16

Service Organization Control (SOC) Reports: What they are and what to do with them MARCH 21, 2017

UKAS accredited Certification Bodies

CSF to Support SOC 2 Repor(ng

354 & Index Board of Directors Responsibilities Audit Committee and Risk Committee Coordination, 244 Audit Committee Functions and Responsibilities, 2

SAS 70 SOC 1 SOC 2 SOC 3. Type 1 Type 2

Retirement of SAS 70 and a new generation of Service Organization Control (SOC) Reports

Audit Considerations Relating to an Entity Using a Service Organization

PREPARING FOR SOC CHANGES. AN ARMANINO WHITE PAPER By Liam Collins, Partner-In-Charge, SOC Audit Practice

Table of Contents. Preface xvii PART ONE: FOUNDATIONS OF MODERN INTERNAL AUDITING

Google Cloud & the General Data Protection Regulation (GDPR)

OF ACCOUNTANTS IAASB CAG MEETING MARCH 7, 2011

WHICH SOC REPORT IS RIGHT FOR YOUR CLIENT?

Lahore University of Management Sciences. ACCT 250 Auditing Spring Semester 2018

International Auditing and Assurance Standards Board (IAASB) International Federation of Accountants 545 Fifth Avenue, 14 th Floor New York, NY 10017

NOW IS THE TIME. to secure our future

SOC 2 examinations and SOC for Cybersecurity examinations: Understanding the key distinctions

Article II - Standards Section V - Continuing Education Requirements

Mastering SOC-1 Attestation Reports Under SSAE 16: Auditing Service Organizations Controls in the Cloud

Minimum Requirements For The Operation of Management System Certification Bodies

SAS 70 Audit Concepts. and Benefits JAYACHANDRAN.B,CISA,CISM. August 2010

Evaluating SOC Reports and NEW Reporting Requirements

PECB Certified ISO Lead Auditor. Master the Audit of Occupational Health and Safety Management System (OHSMS) based on ISO 45001

SERVICE ORGANIZATION CONTROL (SOC) REPORTS: WHAT ARE THEY?

SAS70 Type II Reports Use and Interpretation for SOX

HITRUST CSF: One Framework

Effective COBIT Learning Solutions Information package Corporate customers

MODULE SPECIFICATIONS

SOC Reporting / SSAE 18 Update July, 2017

Exam Questions IIA-CGAP

Description of the certification procedure MS - ISO 9001, MS - ISO 14001, MS - ISO/TS and MS BS OHSAS 18001, MS - ISO 45001, MS - ISO 50001

IT Governance ISO/IEC 27001:2013 ISMS Implementation. Service description. Protect Comply Thrive

IIA EXAM - IIA-CGAP. Certified Government Auditing Professional. Buy Full Product.

Tools & Techniques I: New Internal Auditor

Does a SAS 70 Audit Leave you at Risk of a Security Exposure or Failure to Comply with FISMA?

COSO Enterprise Risk Management

Seize the Future. Date: June 28, Georgia Society of CPA s- Annual Convention. Paul V. Stahlin, CPA Chairman, AICPA

The value of visibility. Cybersecurity risk management examination

Master the Audit of Information Security Management Systems (ISMS) based on ISO/IEC 27001

ISO : Competence Requirements Clause 7

SOC 3 for Security and Availability

Exploring Emerging Cyber Attest Requirements

The Texas A&M University System. Internal Audit Department. Fiscal Year 2014 Audit Plan

Certification Description of Malaysia Sustainable Palm Oil (MSPO) Standard

INTO THE CLOUD WHAT YOU NEED TO KNOW ABOUT ADOPTION AND ENSURING COMPLIANCE

Action Plan Developed by The Iranian Institute of Certified Accountants (IICA) BACKGROUND NOTE ON ACTION PLANS

Making trust evident Reporting on controls at Service Organizations

AICPA ETHICS ANSWER mitfive.org AICPA ETHICS ANSWER. page 1 / 5

COSO Enterprise Risk Management

Cybersecurity The Evolving Landscape

SSAE 18 & new SOC approach to compliance. Moderator Name: Patricio Garcia Managing Partner ControlCase Attestation Services

Requirements for Certification Bodies

Inhalt. Description of Certification Procedure ISO 22000, HACCP and DIN 15593

Achieving third-party reporting proficiency with SOC 2+

ACCREDITATION COMMISSION FOR CONFORMITY ASSESSMENT BODIES

The Value of ANSI Accreditation. Top 10 Advantages. of accredited third-party conformity assessment

IT Attestation in the Cloud Era

IT Audit Process Prof. Liang Yao Week Two IT Audit Function

FORM ADV PART 2B BROCHURE SUPPLEMENT

Credit Union Service Organization Compliance

DESCRIPTION OF AUDITING STANDARDS

Reference Framework for the FERMA Certification Programme

Exam Requirements v4.1

ISAE 3402 and SSAE 16 (replacing SAS 70) Reinforcing confidence through demonstration of effective controls

SQL Compliance Whitepaper HOW COMPLIANCE IMPACTS BACKUP STRATEGY

Federal Acquisition Service Authorized Federal Supply Schedule Price List

ISO 37001: TO INVEST IN THE ACCREDITED CERTIFICATION

Network Instruments white paper

10 Considerations for a Cloud Procurement. March 2017

Presenter: Ian Musweu FCCA, FZICA, CRA. Head of Risk and Assurance Professional Insurance

Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679)

NZQA registered unit standard 8086 version 7 Page 1 of 5. Demonstrate knowledge required for quality auditing

SAS 70 revised. ISAE 3402 will focus on financial reporting control procedures. Compact_ IT Advisory 41. Introduction

General Data Protection Regulation April 3, Sarah Ackerman, Managing Director Ross Patz, Consultant

Audit Absolutes DHS/USCG Perspectives. Jeff Bobich DHS Director of Financial Management Mark Rose USCG Comptroller 10 March 2016

PROJECT MANAGEMENT PROFESSIONAL (PMP)

GUIDELINE FOR TRAINING COURSE QUALIFICATION

ARTICLE 29 DATA PROTECTION WORKING PARTY

IT Audit Process. Prof. Mike Romeu. January 30, IT Audit Process. Prof. Mike Romeu

ISO 27001:2013 certification

The Institute of Certified Accountants of Montenegro. RADUNOVIC VESNA, Certified auditor Member of the Board of Directors

Cyber Security in M&A. Joshua Stone, CIA, CFE, CISA

PRESENTATION OVERVIEW

KENYA SCHOOL OF GOVERNMENT EMPLOYMENT OPORTUNITY (EXTERNAL ADVERTISEMENT)

Training Calendar An independent member of Baker Tilly International, a member of the Forum of Firms

Adopting SSAE 18 for SOC 1 reports

2004 INTERNATIONAL FEDERATION

ACCREDITATION COMMISSION FOR CONFORMITY ASSESSMENT BODIES

Transcription:

Studio Guggino and Newtonpartner S.r.l. a team of professionals at the service of your Company To get where the others fail, we have to achieve even higher goals www.sas70.it

MISSION Our Mission consists in assisting businesses and professionals, supporting them at different times of strategic importance by offering them exclusive services, becoming an important support during their process of development and business consolidation. Professionalism, expertise and network synergies complement the philosophy of our business and represent an ongoing commitment to Customers.

6 COMPETENCY AREAS AT YOUR SERVICE

THE AREAS OF EXPERTISE IN DETAIL RISK MANAGEMENT Assistance to Customers in the identification, corporate risk management and control with the support of integrated solutions (ERM) and in specific areas (compliance risk, credit risk,...). COMPLIANCE Assistance to Customers for early adaptation to national and international compliance regulations, the ISO certification protocols, SSAE 16 (formerly SAS 70) and ISAE 3402 SOC 1, SOC 2, SOC 3, Sarbanes Oxley (SOX), Japanese Sarbanes Oxley (J -SOX), Anti Money Laundering,... STATUTORY AUDIT We analyze and evaluate the processes of corporate accounts and financial statements of the Customers with the aim of expressing an opinion about the reliability of the data and the information it contains. FISCAL AND ACCOUNTANCY CONSULTING We provide our Clientele the classical services provided by chartered accountants such as fiscal consulting, bookkeeping, preparing financial statements and tax declarations and, in general, those services related to consulting in Business and Corporate sector. CERTIFICATION AND REPORT Consultancy and support to companies for obtaining and maintaining certifications in accordance with ISO standards (Quality, Safety, ) Issue of SSAE 16 Report (formerly SAS 70) and ISAE 3402 with implementation of any missing checks in compliance with the above Standard. MANAGEMENT SYSTEM We support companies in the process of implementation, management and verification of organizational management systems (Quality, Environment, Administrative Responsibility, Social Responsibility, Safety,...) either stand-alone or integrated.

IL REPORT SSAE 16 (ex SAS 70) Statement on Standards for Attestation Engagements no. 16 WHY THE REPORT SSAE 16 IS REQUESTED? Because of the scandal of the energy giant Enron, which caused extensive financial damages to investors, in 2002 the US government enacted the Sarbanes Oxley Act (SOX or Sarbox) that, in 404 section, established for the Listed companies' Management a declaration of compliance about the observance of the rigorous controls laid by the same Law relatively to the internal controls system of the business organization with the aim to grant the veracity of the information flows that flow into the financial reporting. Following the requests of the 404 section of Sarbanes Oxley Act was enacted, by AICPA (American Institute of Certified Public Accountants), the SAS 70 became SSAE 16 with effect from July 1, 2011. The SSAE 16 report is issued by an Independent Auditor enabled after the conduct of audits carried out on internal control system implemented by an organization that provides outsourcing services in order to assert compliance of the control system to the Standard. WHO IS OBLIGED The SSAE 16 report is usually required by the US Companies that have their subsidiary in Italy and that they must fulfill the requirements of the 404 section. The CEO and CFO of such companies who decide to outsource some services (payroll, document management, accounting, information technology,...), in order to exempt themselves from their responsibilities arising from that section, require to the same Outsourcer the compliance with the SSAE 16 standard. Nowadays, the SSAE 16 report is required, more and more frequently, not only by American companies, but also from those European companies who consider this Standard, worldwide recognized, a warranty for the outsourced service provided to them. BENEFITS OF A CERTIFICATE INTERNAL CONTROL SYSTEM For the Service Organization: greater competitiveness in international markets, greater organizational efficiency, improvement of their image thanks to the reduction of the likelihood of errors, participation in tenders in which the Report is required as a prerequisite. For the Service Organization s Customers: service guaranteed by certified controls, reduction of costs associated with the Company's balance sheet review activities from the Company requesting the report. IL REPORT ISAE 3402 International Standard for Assurance Engagements no. 3402 ISAE 3402 is an International Standard very similar to SSAE 16 issued by IAASB (International Auditing and Assurance Standards Board) and it is also recognized, as the Standard SSAE 16 from which it differs in relation to some specific control objectives, by IFAC (International Federation of Accountants), World Federation of Certified Public Accountants. Both Reports can be requested jointly by the same company; It is demonstrated by the fact that more and more companies opt for obtaining a "Dual Report" in order to ensure its customers that the services provided to them are safe and conform to either Standards.