What is ISAE 3402?
The international standard ISAE 3402 describes the requirements for the audit of the internal control system of an outsourcing service company and its resulting reporting. Relevant outsourcing especially in the area of accounting-relevant processes that have an influence on external accounting or in the area of financial reporting.
Who needs ISAE 3402?
Service providers who offer accounting-relevant business processes and IT-supported services confirm to their clients in an ISAE 3402 report that they have a functioning internal control system for the processes outsourced to them.
Advantages of certification according to ISAE 3402
-
Proof
of the appropriateness and, if applicable, effectiveness of the service-related ICS
-
Assessment
of business risks through outsourcing of operational processes
-
Reporting
on the ICS of the service company
-
Quality
feature compared to non-certified companies
-
Marketing
instrument for maintaining and expanding the customer base
Multi-level certification
-
Typ 1
Assessing the adequacy and design of controls at a predetermined point in time without making a statement about their effectiveness.
-
Typ 2
In addition to Type I, an assessment of the effectiveness of the established controls of the ICS is carried out within a predefined audit period.
