November 30, 2022

Volume XII, Number 334

Advertisement

November 29, 2022

Subscribe to Latest Legal News and Analysis

November 28, 2022

Subscribe to Latest Legal News and Analysis
Advertisement

Is It Time to Update Your Contract's SSAE Audit Language?

The latest update to the Statement on Standards for Attestation Engagements (SSAE)—a set of standards applying to compliance reporting, issued by the Auditing Standards Board (ASB)—came into effect recently. If your contract requires certain reports from service providers, you may need to update your contractual language to reflect ASB's changes under this recent update (SSAE 18).

Frequently, contracts with service providers for certain services require the service provider to retain an accounting firm to perform specific audits and to deliver the results of such audits or a report thereof. Based on the SSAE 18, the audit language related to such audits may need to be updated. For example, if your audit language requires service organization control (SOC) 1 reports conducted under the SSAE 16 standards, this language is now out of date. As of May 1, 2017, SOC 1 reports will be issued under SSAE 18, which redrafts all of the prior SSAE versions, with a few exceptions. Going forward, an "SSAE 16/SOC 1 report" should be referred to as an "SOC 1 report" in your contracts, removing the reference to SSAE 16.

While many experts are not characterizing the changes in SSAE 18 as major developments, it is still important to discuss these changes with the relevant professionals and to determine whether your contracts' audit language needs to be updated.

Copyright © 2022 by Morgan, Lewis & Bockius LLP. All Rights Reserved.National Law Review, Volume VII, Number 201
Advertisement
Advertisement
Advertisement

About this Author

Michael Pillion, Morgan Lewis, Litigation Attorney
Partner

Michael L. Pillion brings more than 30 years of experience navigating high-stakes transactions to his technology, outsourcing, and commercial transactions practice. He has a diverse client base that spans the health insurance, life sciences, energy, financial services, and real estate industries. He counsels clients in structuring, negotiating, realigning, and terminating information technology (IT) outsourcing and business process outsourcing (BPO) transactions, technology transactions including software as a service (SaaS) and cloud deals, complex commercial...

215-963-5554
Jessica M. Pelliciotta, Morgan Lewis, technology lawyer
Associate

Jessica M. Pelliciotta is part of our outsourcing and strategic commercial transactions team of lawyers, handling critical commercial transactions that enable our clients to run their business operations effectively. The Morgan Lewis team focuses on technology transactions, including licensing, services, and alliance deals that involve emerging technologies such as cloud computing, software as a service (SaaS), and data analytics.

215.963.4889
Advertisement
Advertisement
Advertisement