Update on AICPA Assurance Services Executive Committee Activities
|
|
|
- Aron Pope
- 7 years ago
- Views:
Transcription
1 Update on AICPA Assurance Services Executive Committee Activities Amy Pawlicki Director Business Reporting, Assurance & Advisory Services and XBRL AICPA
2 Agenda ASEC overview Summary of work streams by task force/working group
3 ASEC Overview Mission: To assure the quality, relevance and usefulness of information or its context for decision makers and other users by: 1) identifying and prioritizing emerging trends and market needs for assurance, & 2) developing related assurance methodology guidance and tools as needed.
4 ASEC Work Streams 1. Trust Data Integrity Task Force 2. XBRL Assurance Task Force 3. Future of Assurance Working Group 4. Risk Working Group
5 1. Trust Data Integrity Task Force A. Trust Services Principles and Criteria (P&C) Working Group Attestation (AT101) or advisory services on the security, availability, processing integrity, confidentiality, and privacy of IT-enabled systems including electronic commerce (ecommerce) systems and privacy programs. System reliability (SysTrust) and WebTrust Updated P&C, effective as of September 15, 2009, are contained in the AICPA Technical Practice Aid
6 1. Trust Data Integrity Task Force B. Trust/SSAE Service Organization Working Group Objective- Develop Practitioner Guidance (SOP) on applying the Service Organization SSAE to Trust Services P&C Composition-members of TDITF, Privacy Task Force, CICA s Certificate of Authority Task Force, and staff of ASB & CICA Timing- Issue SOP at same time as ASB & IAASB issue SSAE
7 1. Trust Data Integrity Task Force C. Information Integrity Working Group Developing a Framework for Reporting on Information Integrity that: Will enable attestation both directly on the subject matter as well as on the systems that provide information with integrity Will contain criteria sufficiently robust to meet most user needs Addresses the entire information lifecycle *Targeting criteria exposure in spring/summer 2010
8 1. Trust Data Integrity Task Force
9 2. XBRL Assurance Task Force Auditor implications of SEC Rule The SEC rules do not require any auditor involvement on XBRL-Tagged Data Auditors are not required to apply AU Sections 550, 711 or 722 to interactive data provided in an exhibit or to related viewable interactive data SEC Final Rule release states that issuers can obtain 3 rd party assurance under PCAOB AT 101 Expanded user expectation gap relative to auditor involvement with XBRL exhibits
10 2. XBRL Assurance Task Force Service Implications for Audit Firms Task Force worked with CAQ to release an Alert to address potential services that auditors may be asked to provide for XBRL-tagged information. Advisory Services Assurance Services Impact on Independent Auditor s Report on the Financial Statements
11 2. XBRL Assurance Task Force AICPA released SOP 09-1, Performing Agreed-Upon Procedures Engagements That Address the Completeness, Accuracy, or Consistency of XBRL- Tagged Data.
12 2. XBRL Assurance Task Force Examinations - Task force is working on matters related to examinations of XBRL-tagged data: Development of standard set of assertions Development of procedures/requirements for compliance with attestation standards Development of auditor s report for assurance engagements Analysis of all XBRL SEC rules, including the EDGAR Filer Manual, to determine which rules could be addressed by auditor assurance
13 2. XBRL Assurance Task Force Mitigating the Expectation Gap - The task force is reviewing options to communicate auditor association with XBRL-tagged data: modify auditor report (CAQ Alert recommendation) communicate auditor involvement within XBRL Exhibit communicate auditor responsibility within engagement letters and SAS 61 communications
14 3. Risk Working Group Exploring the current risk landscape to gain an understanding of the marketplace and to determine the need, if any, for an assurance service on risk. Collaborating with Rutgers University on a study of risk management practices
15 4. Future of Assurance Working Group Developing a point of view of future scenarios of user and investor needs for assurance, and identify broader tactical steps for the Profession to pursue to maintain relevance in providing that assurance. Identifying complementary work streams that are being pursued by other groups both within and outside of the AICPA, in order to highlight key related initiatives and to avoid duplication of efforts.
16 Questions and Discussion
Farewell to SAS 70. What you need to know about the New Standard for Service Organization Reporting
Farewell to SAS 70 What you need to know about the New Standard for Service Organization Reporting ADVISORY rights reserved. KPMG and the KPMG logo are registered trademarks of KPMG International Cooperative
Feeley & Driscoll, P.C. Certified Public Accountants / Business Consultants www.fdcpa.com. Visit us on the web: www.fdcpa.com Or Call: 888-875-9770
Feeley & Driscoll, P.C. Certified Public Accountants / Business Consultants www.fdcpa.com SAS 70 Background 2 SAS No. 70 Reports on the Processing of Transactions by Service Organizations Independent examination
Cybersecurity and the AICPA Cybersecurity Attestation Project
Cybersecurity and the AICPA Cybersecurity Attestation Project Chris Halterman Executive Director EY Chair AICPA Trust Information Integrity Task Force 2 October 2015 Increasing awareness of cybersecurity
IAASB Main Agenda (June 2010) Agenda Item. April 28, 2009
Agenda Item 8-B Statement of Position 09-1 April 28, 2009 Performing Agreed-Upon Procedures Engagements That Address the Completeness, Accuracy, or Consistency of XBRL-Tagged Data Issued Under the Authority
G24: Audits of Controls at a Service Organization: New Standards SSAE 16 and ISAE 3402 Duff Donnelly and Jeffrey Spivack, Grant Thornton LLP
G24: Audits of Controls at a Service Organization: New Standards SSAE 16 and ISAE 3402 Duff Donnelly and Jeffrey Spivack, Grant Thornton LLP Audits of controls at a service organization Roadmap to the
SAS No. 70, Service Organizations
SAS No. 70, Service Organizations A standard for reporting on a service organization s controls affecting user entities' financial statements. Only for use by service organization management, existing
FAQs New Service Organization Standards and Implementation Guidance
FAQs New Service Organization Standards and Implementation Guidance During the past two years several significant changes have occurred in audit and attest standards for reporting on controls at service
SERVICE ORGANIZATION CONTROL REPORTS SM. Formerly SAS 70 Reports
SERVICE ORGANIZATION CONTROL REPORTS SM Formerly SAS 70 Reports SAS No. 70, Service Organizations Standard for reporting on a service organization s controls affecting user entities financial statements
BASIS FOR CONCLUSIONS Canadian Standard on Assurance Engagements (CSAE) 3416, Reporting on Controls at a Service Organization
August 2010 BASIS FOR CONCLUSIONS Canadian Standard on Assurance Engagements (CSAE) 3416, Reporting on Controls at a Service Organization This Basis for Conclusions has been prepared by staff of the Auditing
Shared Service System Audits: What User Management and Auditors Need to Know
Shared Service System Audits: What User Management and Auditors Need to Know JFMIP May 2014 Presented by: Robert Dacey GAO Session Objectives Properly using SSAE 16 service organization audit reports Revisions
STAFF QUESTIONS AND ANSWERS
1666 K Street, N.W. Washington, DC 20006 Telephone: (202) 207-9100 Facsimile: (202) 862-8430 www.pcaobus.org Page 1 of 11 STAFF QUESTIONS AND ANSWERS ATTEST ENGAGEMENTS REGARDING XBRL FINANCIAL INFORMATION
G24 - SAS 70 Practices and Developments Todd Bishop
G24 - SAS 70 Practices and Developments Todd Bishop SAS No. 70 Practices & Developments Todd Bishop Senior Manager, PricewaterhouseCoopers LLP Agenda SAS 70 Background Information and Overview Common SAS
SECURITY AND EXTERNAL SERVICE PROVIDERS
SECURITY AND EXTERNAL SERVICE PROVIDERS How to ensure regulatory compliance and manage risks with Service Organization Control (SOC) Reports Jorge Rey, CISA, CISM, CGEIT Director, Information Security
Benefits and Burdens of Proposed Improvements to Delivering Financial Information One Small Public Company Business Executive s Perspective
Benefits and Burdens of Proposed Improvements to Delivering Financial Information One Small Public Company Business Executive s Perspective Developed and Presented by: Gregory P. Hanson, CMA, MBA Presented
Service Organization Control (SOC) Reports
Service Organization Control (SOC) Reports Transitioning from SAS 70 to SSAE 16 Deloitte & Touche LLP Agenda Overview SAS 70/SSAE 16 Historical Perspective The New Framework Under SSAE 16 (SOC 1) Impact
Running head: THE IMPACT OF XBRL ON FINANCIAL REPORTING 1. The Impact of XBRL on Financial Reporting. Rikki George Kennesaw State University
Running head: THE IMPACT OF XBRL ON FINANCIAL REPORTING 1 The Impact of XBRL on Financial Reporting Rikki George Kennesaw State University THE IMPACT OF XBRL ON FINANCIAL REPORTING 2 The Impact of XBRL
Reports on Service Organizations Where we ve been?
Reports on Service Organizations Where we ve been? What s changing? How does this impact Internal Audit? Eric Wright Shareholder Frank Dezort Senior Manager Schneider Downs & Co., Inc. May 2, 2011 Overview
How To Understand The Benefits Of An Internal Audit
Practice Guide Reliance by Internal Audit on Other Assurance Providers DECEMBER 2011 Table of Contents Executive Summary... 1 Introduction... 1 Principles for Relying on the Work of Internal or External
Goodbye, SAS 70! Hello, SSAE 16!
Goodbye, SAS 70! Hello, SSAE 16! A Session to Provide Insight on the New Standard and What Service Providers and End-Users Need to Know January 3, 2012 Agenda Introduction Background on what was SAS 70
SSAE 16 and ISAE 3402: Preparing for New Service Company Control Standards Mastering Requirements Governing Your Next Controls Report
Presenting a live 110 minute teleconference with interactive Q&A SSAE 16 and ISAE 3402: Preparing for New Service Company Control Standards Mastering Requirements Governing Your Next Controls Report WEDNESDAY,
EPCS Third party audits the CPA perspective. 13 September 2012
EPCS Third party audits the CPA perspective 13 September 2012 Agenda Introduction History Report review Audit process Moving forward Introduction 1311.300 Application provider requirements Third-party
The Changing SAS 70 Landscape Dan Hirstein Director Rebecca Goodpasture Senior Manager Deloitte & Touche LLP January 13, 2011
The Changing SAS 70 Landscape Dan Hirstein Director Rebecca Goodpasture Senior Manager Deloitte & Touche LLP January 13, 2011 Table of Contents A Short History of SAS 70 Overview of SSAE 16 and ISAE 3402
Guide to Public Company Auditing
Guide to Public Company Auditing The Center for Audit Quality (CAQ) prepared this Guide to Public Company Auditing to provide an introduction to and overview of the key processes, participants and issues
Service Organization Control (SOC) Reports Focus on SOC 2 Reporting Standard
Information Systems Audit and Controls Association Service Organization Control (SOC) Reports Focus on SOC 2 Reporting Standard February 4, 2014 Tom Haberman, Principal, Deloitte & Touche LLP Reema Singh,
Understanding SOC Reports for Effective Vendor Management. Jason T. Clinton January 26, 2016
Understanding SOC Reports for Effective Vendor Management Jason T. Clinton January 26, 2016 MEMBER OF PKF NORTH AMERICA, AN ASSOCIATION OF LEGALLY INDEPENDENT FIRMS 2012 Wolf & Company, P.C. Before we
Understanding Vendor Risk And Analyzing the SSAE No. 16
Understanding Vendor Risk And Analyzing the SSAE No. 16 Accelerate your Credit Union s Performance June 19, 2014 AUSTIN, TEXAS www.cuaccelerator.com Agenda Vendor Management Key Outsourcing Risk Areas
Effectively using SOC 1, SOC 2, and SOC 3 reports for increased assurance over outsourced operations. kpmg.com
Effectively using SOC 1, SOC 2, and SOC 3 reports for increased assurance over outsourced operations kpmg.com b Section or Brochure name Effectively using SOC 1, SOC 2, and SOC 3 reports for increased
MHM S PERSPECTIVE: CHANGES COMING TO SAS 70.KNOW THE FACTS
Mayer Hoffman McCann P.C. An Independent CPA Firm MHM S AUDITING PERSPECTIVE: STANDARD NO. 5 Since its issuance in 1992, the American Institute of Certified Public Accountants (AICPA) Statement on Auditing
Consultation Response
Consultation Response PROPOSED AUDITING STANDARD AN AUDIT OF INTERNAL CONTROL OVER FINANCIAL REPORTING PERFORMED IN CONJUNCTION WITH AN AUDIT OF FINANCIAL STATEMENTS PCAOB Rulemaking Docket Matter No.
SSAE 16 Everything You Wanted To Know But Are Afraid To Ask. Kurt Hagerman CISA, CISSP, QSA Managing Director, Coalfire December 8, 2011
SSAE 16 Everything You Wanted To Know But Are Afraid To Ask Kurt Hagerman CISA, CISSP, QSA Managing Director, Coalfire December 8, 2011 1 Agenda SAS 70 Misunderstood and Overused o Why the change? SSAE
Data Analytics Working Group Update
Working Group Update Bob Dohrer, IAASB Member and Working Group Chair IAASB CAG Meeting September 2015 Agenda Item L.1 Page 1 Audit Data Analytics Agenda Current Landscape Audit Data Analytics and the
Here comes SSAE 16 SAS 70 EVOLUTION: How will the new standard affect my business? How do I prepare to meet the new requirements?
SAS 70 EVOLUTION: Here comes SSAE 16 PLANNING FOR THE NEW SERVICE ORGANIZATION REPORTING STANDARDS The prevalence of SAS 70 audits has grown dramatically since the standards issuance in April of 1992.
Baker Tilly refers to Baker Tilly Virchow Krause, LLP, an independently owned and managed member of Baker Tilly International. Understanding SOC 3
Baker Tilly refers to Baker Tilly Virchow Krause, LLP, an independently owned and managed member of Baker Tilly International. Understanding SOC 3 Agenda 1) A brief perspective on where SOC 3 originated
Service Organization Control (SOC) reports What are they?
Service Organization Control (SOC) reports What are they? Jeff Cook, CPA, CITP, CIPT, CISA June 2015 Introduction Service Organization Control (SOC) reports are on the rise in the IT assurance and compliance
TIS Section 9520, SSAE No. 16, Reporting on Controls at a Service Organization
November 2011 AICPA Technical Practice Aids TIS Section 9520, SSAE No. 16, Reporting on Controls at a Service Organization.01 New Standards for Service Auditors and User Auditors Inquiry Did the issuance
Frequently asked questions: SOC 2 and 3
1. Is the licensing requirement for a SOC 2 or 3 different than for a SOC 1? SOC reports are attestation reports issued in accordance with AICPA standards. Therefore, licensing requirements are the same
Service Organization Control Reports
SAS 70 ENDS EXIT TO SSAE 16 Service Organization Control Reports What Did We Learn from Year One? Agenda Definitions Service Organization Reports What are they? Year One Experiences SSAE 16 Year One Experiences
Monitoring Outside Service Providers, Part III: SAS 70 Updates
Monitoring Outside Service Providers, Part III: SAS 70 Updates Richard F. Fischer, CPA Louis Plung & Company, LLP richard.fischer@louisplung.com 412-281-8771 CHANGES TO SAS 70 SERVICE ORGANIZATIONS: Statement
Service Organization Controls. Managing Risks by Obtaining a Service Auditor s Report
Service Organization Controls Managing Risks by Obtaining a Service Auditor s Report Contributing Authors Audrey Katcher, CPA, CITP, Partner at RubinBrown, LLP Janis Parthun, CPA, CITP, Sr. Technical Manager
SSAE 16 for Transportation & Logistics Companies. Chris Kradjan Kim Koch
SSAE 16 for Transportation & Logistics Companies Chris Kradjan Kim Koch 1 The material appearing in this presentation is for informational purposes only and should not be construed as advice of any kind,
Information for Management of a Service Organization
Information for Management of a Service Organization Copyright 2011 American Institute of Certified Public Accountants, Inc. New York, NY 10036-8775 All rights reserved. For information about the procedure
Data Analytics Working Group Update
Working Group Update Bob Dohrer, IAASB Member and Working Group Chair IAASB Meeting June 2015 Agenda Item 3-A Page 1 Audit Data Analytics Agenda Current Landscape What Is It? Audit Data Analytics and the
Service Organization Controls. Managing Risks by Obtaining a Service Auditor s Report
Service Organization Controls Managing Risks by Obtaining a Service Auditor s Report Contributing Authors Audrey Katcher, CPA/CITP, Partner at RubinBrown, LLP Janis Parthun, CPA/CITP, Sr. Technical Manager
About the Presenter. Presentation Objectives. SaaS / Cloud Computing Risk Management AICPA Attest Alternatives
SaaS / Cloud Computing Risk Management AICPA Attest Alternatives Presenter: Dan Schroeder, CPA/CITP Habif, Arogeti, & Wynne, LLP Georgia Society of CPAs Annual Convention June 16, 2010 About the Presenter
Innovation Working Group
Innovation Working Group Chuck Landes, Chair, Innovation Working Group Agenda Item I.1 IAASB-CAG Meeting, September 15-16, 2015 New York, USA Page 1 Purpose of the Session Inform the CAG on new developments
The Future of Audit. AICPA s ASEC (Assurance Services Executive Committee)
The Future of Audit Miklos A. Vasarhelyi Rutgers University - KPMG Professor of AIS AT&T Laboratories Senior Consultant AICPA s ASEC (Assurance Services Executive Committee) Aiming to modernize CPA services
GAO. Government Auditing Standards. 2011 Revision. By the Comptroller General of the United States. United States Government Accountability Office
GAO United States Government Accountability Office By the Comptroller General of the United States December 2011 Government Auditing Standards 2011 Revision GAO-12-331G GAO United States Government Accountability
SSAE 16 & SAS 70 A Primer on Changes to Service Organization Audit Standards
A Member of OneBeacon Insurance Group SSAE 16 & SAS 70 A Primer on Changes to Service Organization Audit Standards Author: Jack Fletcher, Risk Control Technology Specialist Published: November 2014 Executive
3.B METHODOLOGY SERVICE PROVIDER
3.B METHODOLOGY SERVICE PROVIDER Approximately four years ago, the American Institute of Certified Public Accountants (AICPA) issued Statement on Standards for Attestation Engagements (SSAE) No. 16, Reporting
IAASB Main Agenda (June 2010) Agenda Item. The Implications of XBRL for the Financial Statement Audit. Update on Research Objectives and Methods
Agenda Item 8-C The Implications of XBRL for the Financial Statement Audit A Proposal to the ACCA/IAAER Research Program to support the work of the IAASB Update on Research Objectives and Methods Roger
The views expressed in these slides are solely the views of the Investor Advisory Group members who prepared them and do not necessarily reflect the
The views expressed in these slides are solely the views of the Investor Advisory Group members who prepared them and do not necessarily reflect the views of the PCAOB, the members of the Board, or the
Public Accounting Licence Requirements for Assurance Engagements Specified in the CICA Handbook -- Assurance
Public Accounting Licence Requirements for Assurance Engagements Specified in the CICA Handbook -- Assurance Update: May, 2009 Various sections in the CICA Handbook Assurance that refer in some manner
At a glance. A provision to require a written assertion from company management is the most notable difference between the two standards.
At a glance While there are some differences, SAS 70 and SSAE 16 are substantially the same. SAS 70 is an audit standard while SSAE 16 is an attest standard. Out with the old SAS 70 and in with the new
Copyright 2015, American Institute of Certified Public Accountants, Inc. All Rights Re... STATEMENT ON STANDARDS FOR CONSULTING SERVICES
Page 1 of 7 Consulting Services CS Section STATEMENT ON STANDARDS FOR CONSULTING SERVICES Statements on Standards for Consulting Services are issued by the AICPA Management Consulting Services Executive
SECTION I INDEPENDENT SERVICE AUDITOR S REPORT
SOC2 Security Report on Controls Supporting DriveSavers Services Independent Service Auditor s Report on Design of Controls Placed in Operation and Tests of Operational Effectiveness Relevant to Security
Innovation Working Group
Innovation Working Group Chuck Landes, IAASB Deputy Chair and Working Group Chair IAASB Meeting September 2015 Agenda Item 8-B Page 1 Purpose of the Session Inform the IAASB on new developments that may
STANDING ADVISORY GROUP MEETING
1666 K Street, NW Washington, D.C. 20006 Telephone: (202) 207-9100 Facsimile: (202)862-8430 www.pcaobus.org STANDING ADVISORY GROUP MEETING BROKER-DEALER AUDIT CONSIDERATIONS JULY 15, 2010 Introduction
WELCOME TO SECURE360 2013
WELCOME TO SECURE360 2013 Don t forget to pick up your Certificate of Attendance at the end of each day. Please complete the Session Survey front and back, and leave it on your seat. Are you tweeting?
Internal Control over Financial Reporting Guidance for Smaller Public Companies
Internal Control over Financial Reporting Guidance for Smaller Public Companies Frequently Asked Questions Internal Control over Financial Reporting Guidance for Smaller Public Companies Frequently Asked
100 What Are They? Agreed upon procedures. Audits, reviews, compilations, or preparations of specified elements of a financial statement.
Checkpoint Contents Accounting, Audit & Corporate Finance Library Editorial Materials Audit and Attest Nontraditional Engagements Chapter 1 Nontraditional Engagements an Introduction 100 What Are They?
End of the SAS 70 Era
End of the SAS 70 Era For years businesses that outsource have relied on SAS 70 reports on the internal controls of third party providers. The standard for those reports is changing. New Standards Replacing
SOC 3 for Security and Availability
SOC 3 for Security and Availability Independent Practioner s Trust Services Report For the Period October 1, 2013 through September 30, 2014 Independent SOC 3 Report for the Security and Availability Trust
PCAOB Forum on Auditing Smaller Broker-Dealers
PCAOB Forum on Auditing Smaller Broker-Dealers Kevin M. Stout Senior Associate Chief Accountant Office of the Chief Accountant U.S. Securities and Exchange Commission May 28, 2014 1 Disclaimer The Securities
Audit, Review, Compilation, and Preparation of Financial Statements
Audit, Review, Compilation, and Preparation of Financial Statements DISCLAIMER: This publication has not been approved, disapproved or otherwise acted upon by any senior technical committees of, and does
Prüfung von Outsourcing mit SAS70
Prüfung von Outsourcing mit SAS70 AGENDA Historical flashback Reasons for the standard Major contents Potential areas of SAS 70 application Audit approach and Responsibility Client and Service Provider
KPMG Canada s IT Advisory Services
I T A D V I S O R Y KPMG Canada s IT Advisory Services Helping clients address today s technology agenda A D V I S O R Y Overview of KPMG Canada s IT Advisory Services KPMG s IT Advisory professionals
LEGAL OUTSOURCING INTO INDIA A CONCEPT PAPER
LEGAL OUTSOURCING INTO INDIA - A CONCEPT PAPER 87 LEGAL OUTSOURCING INTO INDIA A CONCEPT PAPER SATISH MENON* BUSINESS PROCESS OUTSOURCING Business Process Outsourcing (BPO) refers to the conscious decision
BC54: Preparing for a SAS 70 Audit
BC54: Preparing for a SAS 70 Audit Kathleen Lucey Montague Risk Management kalucey@montaguetm.com tel: 1.516.676.9234 1 What is SAS 70? History and Purpose What does it include? Type 1 vs. Type 2 Grades
Guide to the Sarbanes-Oxley Act: IT Risks and Controls. Frequently Asked Questions
Guide to the Sarbanes-Oxley Act: IT Risks and Controls Frequently Asked Questions Table of Contents Page No. Introduction.......................................................................1 Overall
RE: PCAOB Rulemaking Docket Matter No. 004 Statement Regarding the Establishment of Auditing and Other Professional Standards
May 12, 2003 Office of the Secretary Public Company Accounting Oversight Board 1666 K Street, N.W. Washington, D.C. 20006-2803 RE: PCAOB Rulemaking Docket Matter No. 004 Statement Regarding the Establishment
) ) ) ) ) ) ) ) ) ) ) )
1666 K Street, NW Washington, DC 20006 Telephone: (202) 207-9100 Facsimile: (202) 862-8430 www.pcaobus.org AUDITING STANDARD No. 16 COMMUNICATIONS WITH AUDIT COMMITTEES; RELATED AMENDMENTS TO PCAOB STANDARDS;
Chapter 04. Board of Public Accountancy.
Chapter 04. Board of Public Accountancy. (Words in boldface and underlined indicate language being added; words [CAPITALIZED AND BRACKETED] indicate language being deleted. Complete new sections are not
Auditing CPA EXAM REVIEW V 1.0
V 1.0 CPA EXAM REVIEW Auditing UPDATES AND ACADEMIC HELP Click on Community and Support at www.becker.com/cpa CUSTOMER SERVICE AND TECHNICAL SUPPORT Call 1.877.CPA. EXAM (Outside the U.S. +1.630.472.2213)
THE DATA CENTER COMPLIANCE ACRONYMS YOU NEED TO KNOW
THE 22 DATA CENTER COMPLIANCE ACRONYMS YOU NEED TO KNOW In today s world, data center compliance is no joke, and firewalls aren t enough to keep your data safe. Whether you re outsourcing or housing your
THE ROLE OF AN SOC 1 REPORT (formerly SAS 70) IN FREIGHT PAYMENT
THE ROLE OF AN SOC 1 REPORT (formerly SAS 70) IN FREIGHT PAYMENT White Paper www.a3freightpayment.com THE ROLE OF AN SOC 1 REPORT (formerly SAS 70) IN FREIGHT PAYMENT Introduction An essential element
Reporting on Pro Forma Financial Information
Reporting on Pro Forma Financial Information 1381 AT Section 401 Reporting on Pro Forma Financial Information Source: SSAE No. 10. Effective when the presentation of pro forma financial information is
Service Organizations and the Internal Audit function. 2015 conference Institute of Internal Auditors in Israel
Service Organizations and the Internal Audit function 2015 conference Institute of Internal Auditors in Israel Proprietary This work product/document is intended solely for the information and use of the
Ayla Networks, Inc. SOC 3 SysTrust 2015
Ayla Networks, Inc. SOC 3 SysTrust 2015 SOC 3 SYSTRUST FOR SERVICE ORGANIZATIONS REPORT July 1, 2015 To December 31, 2015 Table of Contents SECTION 1 INDEPENDENT SERVICE AUDITOR S REPORT... 2 SECTION 2
Citation for published version (APA): Berthing, H. H. (2014). Vision for IT Audit 2020. Abstract from Nordic ISACA Conference 2014, Oslo, Norway.
Aalborg Universitet Vision for IT Audit 2020 Berthing, Hans Henrik Aabenhus Publication date: 2014 Document Version Early version, also known as pre-print Link to publication from Aalborg University Citation
Auditing Derivative Instruments, Hedging Activities, and Investments in Securities 1
Auditing Derivative Instruments 1915 AU Section 332 Auditing Derivative Instruments, Hedging Activities, and Investments in Securities 1 (Supersedes SAS No. 81.) Source: SAS No. 92. See section 9332 for
Evolving the CPA Profession s Peer Review Program for the Future
Evolving the CPA Profession s Peer Review Program for the Future A provocative vision of what practice monitoring could become REIMAGINE FUTURE INSPECTION PRACTICE MONITORING PEER REVIEW OVERSIGHT FEEDBACK
Cloud Computing Risk Assessment
Cloud Computing Risk Assessment A Case Study Sailesh Gadia, CISA, ACA, CPA, CIPP, is a director/senior manager at KPMG s advisory practice in Minneapolis, Minnesota, USA. He has an extensive background
ISAE 3402 and SSAE 16 (replacing SAS 70) Reinforcing confidence through demonstration of effective controls
ISAE 3402 and SSAE 16 (replacing SAS 70) Reinforcing confidence through demonstration of effective controls ISAE 3402 and SSAE 16 defined Overview of service organisation control reports Service organisation
Center for Audit Quality Update
Center for Audit Quality Update Cindy Fornelli Executive Director, The Center for Audit Quality AICPA Conference on Current SEC and PCAOB Developments Washington, DC December 9, 2013 Thank you. I will
Innovation Working Group (WG) Report Back
Meeting: IAASB Consultative Advisory Group Agenda Item Meeting Location: New York, USA Meeting Date: March 9 10, 2015 Objectives of Agenda Item Innovation Working Group (WG) Report Back E 1. To provide
STANDING ADVISORY GROUP MEETING
1666 K Street, NW Washington, D.C. 20006 Telephone: (202) 207-9100 Facsimile: (202)862-8430 www.pcaobus.org STANDING ADVISORY GROUP MEETING AUDIT CONFIRMATIONS APRIL 2, 2009 Introduction Confirmations
SOC on Amazon Web Services (AWS) What You Need To Know Understanding the regulatory roadmap for SOC on AWS
SOC on Amazon Web Services (AWS) What You Need To Know Understanding the regulatory roadmap for SOC on AWS Jeff Cook November 2015 Summary Service Organization Control (SOC) reports (formerly SAS 70 or
STANDING ADVISORY GROUP MEETING
1666 K Street, NW Washington, D.C. 20006 Telephone: (202) 207-9100 Facsimile: (202) 862-8430 www.pcaobus.org STANDING ADVISORY GROUP MEETING PANEL DISCUSSION FORENSIC AUDIT PROCEDURES FEBRUARY 22, 2007
) ) ) ) ) ) ) ) ) ) ) )
1666 K Street, NW Washington, D.C. 20006 Telephone: (202) 207-9100 Facsimile: (202)862-8430 PROPOSED AUDITING STANDARD RELATED TO CONFIRMATION AND RELATED AMENDMENTS TO PCAOB STANDARDS ) ) ) ) ) ) ) )
Role is Broader and More Strategic
Internal Control Transformation IC s Role is Broader and More Strategic CACUBO Winter Workshop - 2013 Introduction Cindy Berg Director McGladrey LLP 201 N Harrison Street Davenport, Iowa 52801 cindy.berg@mcgladrey.com
Hot Topics in IT. CUAV Conference May 2012
Hot Topics in IT CUAV Conference May 2012 Baker Tilly Virchow Krause, LLP Baker Tilly refers to Baker Tilly Virchow Krause, LLP, an independently owned and managed member of Baker Tilly International.
STAFF QUESTIONS AND ANSWERS
1666 K Street, N.W. Washington, DC 20006 Telephone: (202) 207-9100 Facsimile: (202) 862-8430 www.pcaobus.org STAFF QUESTIONS AND ANSWERS AUDITING INTERNAL CONTROL OVER FINANCIAL REPORTING Summary: Staff
Valuing and Reporting Plan Investments
Valuing and Reporting Plan Investments PLAN ADVISORY Table of Contents Introduction 2 Your Responsibility for Reporting Plan Investments 3 Your Responsibility for Valuing Investments and Establishing
Tim has rightly turned our attention to the future, giving us a concrete set of ideas on how to maintain relevance.
"Center for Audit Quality Update: Focus on the Future" Cindy Fornelli Executive Director Center for Audit Quality December 9, 2015 AICPA Conference on Current SEC and PCAOB Developments Washington, DC
AICPA Discussion Paper - Enhancing Audit Quality, Plans and Perspectives for the U.S. CPA Profession
November 7, 2014 VIA E-MAIL EAQ@aicpa.org Re: AICPA Discussion Paper - Enhancing Audit Quality, Plans and Perspectives for the U.S. CPA Profession To the Members of the AICPA Discussion Paper Initiative:
A I. C A Q A p p r o a c h to A u d i t Q u a l i ty I n d i c a to r s
C A Q A p p r Qo a c h to A u d i t u a l i ty n d i c a to r s A C A Q A p p r o a c h to A u d i t Q u a l i ty n d i c a to r s The Center for Audit Quality (CAQ) is an autonomous public policy organization
STANDING ADVISORY GROUP MEETING
1666 K Street, N.W. Washington, DC 20006 Telephone: (202) 207-9100 Facsimile: (202) 862-8430 www.pcaobus.org RISK ASSESSMENT IN FINANCIAL STATEMENT AUDITS Introduction The Standing Advisory Group ("SAG")
The end of SAS70 what next for Performance Assurance?
Enhancing Trust and Transparency The end of SAS70 what next for Performance Assurance? A perspective on transitioning from SAS 70 to ISAE 3402 pwc Enhancing Trust and Transparency 1 Contents What you need
Continuous auditing: the audit of the future
Zabihollah Rezaee Professor of Accounting, Middle Tennessee State University, Murfreesboro, Tennessee, USA Rick Elam Reynolds Professor of Accountancy, University of Mississippi, Oxford, Mississippi, USA
Understanding SAS 70 Reports on Internal Control
Understanding SAS 70 Reports on Internal Control PwC Agenda Internal Control Reporting: A Focus on SAS 70 Trends affecting internal control reporting Discussion points for Mutual Fund Directors with management