Skip to main content
risk advisory

Risk advisory

ISAE 3402

ISAE 3402

Implementing ISAE 3402 requires effective planning, leadership involvement, thorough analysis of processes and reliable resources and project management.

Outsourcing

Outsourcing

An ISAE 3402 project typically starts with an implementation phase in which the SOC-report is prepared. The overall success of an ISAE 3402 project is highly dependent of the alignment of the service organizations’ control objectives and framework to the needs and requirements of all stakeholders.

Outsourcing

Outsourcing

Is this proposal we have prepared two alternatives for the advisory services. Option I is prepared based on the advisory request in the RFP and consists of 16 hour to review the ISAE 3402 & advise on documentation provisioning for audit purposes.

Outsourcing

Outsourcing

Option II is prepared based on the number of controls and our experience in the pension administration industry. A typical pension administration organization in the Netherland has typically 300 controls. Our experience in the pension administration industry is that pension plans and formal procedures relating these, including the PensioenWet (PW) bring a level of complexity that controlling these procedures justify this number of controls.

 

Of course, we will always strive to minimize layered on controls and seek for efficiency, however providing a realistic view leads to a more sustainable relation in our opinion.

The global standard for controlled outsourcing

1 Step

2 Step

3 Step

About

Certicus is an international audit firm providing services to the top tier IT and financial services firms worldwide. We continuously explore the latest technology and adapt to follow world’s new trends to deliver the best assurance services to the market.