The SSAE16 standard is a recent evolvement of SAS70, which intends to align US companies with ISAE 3402 the international standard. This process is designed to help in guaranteeing a higher level of security and reliability in hosting the type of sensitive eCommerce operations for the clients of Nexcess™.
What is SSAE16?
The Statement on Standards for Attestation Engagements No. 16 (SSAE16) data center examinations were first introduced by the Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants (AICPA) as a replacement to Statement on Auditing Standards (SAS70). SSAE16 was created with the intention of bringing the United States up to code with the International Standards for Assurance Engagements No. 3402 (ISAE3402). The AICPA describes SSAE16 as "the primary standard for reporting on controls at service organizations."
Why Do These Standards Matter?
Audits like SSAE16 confirm that data center operators’ controls meet established standards of suitability, design, and effectiveness. SSAE16 defines a "control" as anything that comes into contact with a data center’s hosting products, or, “the services provided, along with the supporting processes, policies, procedures, personnel, and operational activities that constitute the service organization’s core activities that are relevant to user entities.”
First, this is intended to increase consumer confidence by enforcing the AICPA’s high operational standards through the SSAE16 audit. Second, for many organizations, such as those that are publicly traded or those in the medical or payroll-processing industries, SSAE16 compliance is likely to be a legal requirement when obtaining services from any outsourced providers.
Have Nexcess Data Centers Undergone the SSAE16 Audit?
Yes, we complete our Type II SSAE16 audit annually. We will continue to perform SSAE16 audits annually to verify our compliance with established standards. If you need a copy of our certificate please contact our sales team at email@example.com or 866-639-2377.
For more information on the SSAE16 standards, visit their website.