SSAE 16 Readiness Assessments will without question become a hot “to do” list for many service organizations who are effectively transitioning from SAS 70 to the new SSAE 16 standard. Some organizations will find the transition to be relatively smooth, while others will find significant work will need to be done for meeting the requirements of SSAE 16.
Much like SAS 70 Readiness Assessments, an SSAE 16 Readiness Assessment should be looked upon as a useful and proactive step in meeting compliance. There are without question a number of items that an SSAE 16 Readiness Assessment can assist with, such as audit scope, how to prepare one’s description of its “system” along with preparing a written assertion by management.
Additionally, an SSAE 16 Readiness Assessment can help unearth what role, if any, the internal audit function would play in a SSAE 16 Type 1 or Type 2 engagement.
In short, they are important and should be considered a “must do” for any service organization seeking to comply the new standard. Hello SSAE 16 ( and ISAE 3402)….goodbye SAS 70.