White Clarke Group, a leading a provider of automotive & asset finance software solutions and consulting services, is pleased to announce that it has recently completed a SOC 1 (SSAE 16) examination and an international ISAE 3402 examination. The examinations were completed in September, 2014 by a nationally recognized independent auditing firm, which issued an affirmative (“unqualified”) opinion regarding each of the control areas.
The SSAE 16 updates a prior standard for Statement on Auditing Standards (SAS) No. 70, Service Organizations. Unlike its predecessor however this is not just a one-size fits all certification. The auditors instead identify the individual critical processes and controls on which each service organization relies, before it tests compliance over an extended period of not less than six months. Because critical controls vary between companies, compliance to this new standard is seen as a more relevant test and therefore a better indicator of an effectively managed service organization. In order to complete the examination, White Clarke Group developed control objectives focussing on computer operations, logical access, scheduled operations and application change management.
“This is really a validation of internal controls that organizations should already have in place” said Kurt Ruhlin, Chief Operating Officer at White Clarke Group in the United States.
“The auditors came in February this year to have a look at how we operate, and to understand what controls our clients rely on; and for the period March through August they monitored our compliance with those controls. In September it was confirmed that we had complied without qualification. “It’s a testament to the team here, that we have been doing it right all along.” He added. “At White Clarke Group we are always focused on compliant delivery so the controls were already in place when the audit team came on board, and compliance monitoring was pretty much a non-event as a result. We’re pretty proud of that.”
The successful completion of the 2014 SOC 1/ISAE 3402 examination is part of White Clarke Group’s continued commitment to maintaining a high level of internal control. From this year, White Clarke Group will undergo a Type 2 examination on an annual basis.
SSAE 16/SOC 1, or Statement of Standards for Attestation Engagements No. 16 / Service Organization Controls Report 1, is an “attest” standard for service organizations drawn up by the Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants (AICPA). Effective since June 2011, the SSAE 16 standard is used to provide user auditors with detailed information about financial controls at a service organization. The standard, which is increasingly seen as a requirement for service organizations serving financial services clients in the United States, is built on the international framework ISAE 3402, and is recognized worldwide.