In 2010, the American Institute of Certified Public Accountants issued Statement 16 on Standards for Attestation Engagements (SSAE No. 16) which has now become effective for service auditors’ reports.
Kaye-Smith examined the standard and chose Service Organization Control (SOC) Report No. 2 or SOC-2. SOC-2 closely matches the reports that Kaye-Smith has issued under all previous SAS 70 audits.
SOC-2 reports on controls relevant to security, availability, processing integrity, confidentiality, or privacy.
Kaye-Smith is completing Phase One for the testing period of April through June. Phase Two, and a completed report (which is a helpful report for use by our user organizations and their auditors) is expected shortly after the end of September 2011.
We would like to extend a special thank you to all responsible Kaye-Smith departments and employees who have – and will – provide all the necessary, accurate and timely information that is required for an audit of this scale.