SSAE 18 Examinations Methodology

We tailor every audit to our clients’ requirements; however, we have a four-phase fundamental process that normally meets our clients’ needs and creates an efficient unobtrusive audit so you can focus on your business and we can focus on your compliance.

Scope (Phase 1):  Not every SSAE 18 audit has the same requirements; each company can vary depending on the type of services they perform for their customers.  We have years of experience working with just about every industry and work with our clients to ensure that we cover the appropriate scope to ensure your customers’ needs are satisfied.  The scoping phase of our audit is normally covered during our initial quoting process, but we offer to have a formal meeting with all of our clients to ensure we are on the same page.

Plan (Phase 2):  we offer two options for the planning phase of your audit.

1.    We provide our in-house developed questionnaires and request list that are based on industry-leading compliance frameworks such as CobiT, ISO 27000, PCI and HIPAA.  Customers benefit from this approach by getting to work at their own pace with just a deadline in mind.

2.    The other option is an onsite visit to perform walkthroughs of the relevant service offerings.  We then customize our audit plan and deliver a detail document request list to prepare our clients for phase three (fieldwork).

Fieldwork (Phase 3): Our auditors have a minimum of five years of experience with the Big Four, large consulting firms and smaller boutique firms that specialize in SSAE 18 audits.  Due to this we are efficient and understand what is required for each audit.  Don’t worry, you don’t have to train our auditors, we are qualified for what we sell.

Report (Phase 4): Your SSAE 18 audit report is essentially what you pay us for, therefore we make sure that we produce quality written, well define reports that are focused on providing your customers with everything they need from a third party assurance perspective.  We take pride in delivering quality and timely reports and stand behind everything we issue.

Project Timeline for the Four Phase Audit

More Information