HealthPlan Services Conducts Annual SSAE16 Audit
The SSAE 16 audit process includes an in-depth audit examination of the effectiveness of a service organization’s internal controls. An SSAE 16 audit is very important to public companies in the US that are required to comply with the terms of the Sarbanes-Oxley Act (SOX) of 2002. HealthPlan Services’ audit process, along with our HIPAA compliance, offers all of our clients the following competitive benefits:
- Assurance that our internal controls are suitably designed, and are operating effectively.
- Assurance that physical access, IT infrastructure, data and network are secured against certain threats.
- Assurance that the data center’s control policies and procedures have been evaluated and reviewed by an independent third party.
- Confidence that with a service provider that has undergone a SSAE 16 audit provides clients the ability to assure their own customers that their data and information is secure, helping them keep, attract, and build their business.
SSAE 16 Definition | Provided by the SSAE 16 Resource Guide
SSAE 16 Definition: Statement on Standards for Attestation Engagements (SSAE) No. 16 is an attestation standard put forth by the Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants (AICPA) that addresses engagements undertaken by a service auditor for reporting on controls at organizations (i.e., service organizations) that provide services to user entities, for which a service organization's controls are likely to be relevant to a user entities internal control over financial reporting (ICFR).
SSAE 16 effectively replaces Statement on Auditing Standards No. 70 (SAS 70) for service auditor's reporting periods ending on or after June 15, 2011. Two (2) types of SSAE 16 reports are to be issued, a Type 1 and a Type 2. Additionally, SSAE 16 requires that the service organization provide a description of its "system" along with a written assertion by management.
For more information, please contact us at firstname.lastname@example.org or call 800-237-6171.