[BCB:5:Third-party support:ECB] Because Sage Fixed Assets is provided as packaged software solution rather than as services, SSAE 16, SSAE 17 a SOC 1, formerly SAS 70, certification does not apply.
The Statement on Auditing Standards SSAE 16, SSAE 18, SOC 1 as well as previous SAS 70, Service Organizations, is an auditing standard that was issued by the American Institute of Certified Public Accountants (AICPA). The intent of the standard is to provide a guideline to ensure that adequate controls are in place over service organizations and service providers.
SSAE 16, SSAE 18, SOC, SOC 1 and SAS 70 applies when financial statements are audited only if the organization obtains services from another organization. Sage accounting and specialized solutions (such as Sage 100, Sage 500, Sage Fixed Assets, Sage Business Vision, and Sage Fixed Assets) are provided as packaged software solutions rather than as services.
Organizations that use Sage accounting solutions are always in full control of their data - from establishing access, entering information, and producing reports. While organizations may provide data or reports to Sage for specific projects (for example, Sage Expert Services engagements), no data is ever automatically sent outside of the organization's control. Under no circumstances is Sage represented as a service provider for retrieving, analyzing, and reporting on any organization's information.
SSAE 16 and SSAE 18 effectively replaced SAS 70 as the standard for reporting on service organizations [BCB:165:Chat Fixed Assets US:ECB]
|