What is Service auditor?
In short
A service auditor reports on the controls at a service organization, such as a payroll processor, for use by its customers' auditors. The report covers management's description of its system and its written assertion.
Key takeaways
- A Type 1 report covers design at a point in time; a Type 2 report adds operating effectiveness over a period.
- User auditors decide how much they can rely on the report.
- The report is addressed to the service organization.
Where it's tested
AUD: Attestation & System and Organization Controls (SOC) Engagements — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A user auditor wants to rely on controls at a service organization for the entire audit period. Which report provides appropriate evidence?