Recodifying SOC reports: What SSAE No. 18 means for SOC 1s

January 16, 2017 Ryan Buckner

SSAE 18 WhitepaperOriginally published in Accounting Today

Simply put, SSAE No 18 is the standard which recodifies all the previous attestation standards. It is the culmination of the efforts to clarify the various standards for performing attestation engagements, which includes among many others, SOC 1 (commonly referred to as SSAE No. 16) and SOC 2 and SOC 3 (AT Section 101), into a single set of standards for the auditors.

The practitioners performing the attestation engagements for SOC reports will not notice very many material changes in the standards; however, there are a few key areas of emphasis worth noting for SOC 1 reports:

  • Modification to assertion criteria
  • Evaluating the reliability of evidence provided by the service organization
  • Monitoring of sub service organizations
  • Obtaining an understanding of the service organization’s system and assessing the risk of material misstatement

Download our complete guide to the SSAE No 18 standard:

New Call-to-action

About the Author

Ryan Buckner

Ryan Buckner is a Principal at Schellman & Company. Ryan currently serves on Schellman’s attestation leadership team and leads the firm-wide research and development for attestation methodology. Ryan is a CIPP, CISSP, CISA, ISO 27001 Lead auditor, and maintains multiple CPA licenses, among other certifications. Ryan is also an AICPA-approved and nationally listed Peer Review Specialist for SOC 1 and SOC 2 examinations. Having completed over 1,000 service audits, Ryan is one of the most experienced service auditors in the world.

More Content by Ryan Buckner
Previous Article
What will the Privacy Landscape Be in 2017?
What will the Privacy Landscape Be in 2017?

There have been many changes in the privacy world in the last few years. People are becoming mor...

Next Article
The Benefits of a Clean Desk Policy
The Benefits of a Clean Desk Policy

We all have our own ways of creating our perfect working environment. Some of us like to have ph...


First Name
Error - something went wrong!