"Hancock & Dana’s professionals are proactive – they truly care and have made a significant difference in helping me accomplish my goals."

– Randy, business owner

SSAE16 (formerly SAS70)

Since the introduction of Sarbanes-Oxley in 2002, many companies with SEC-registered customers are required to have SSAE16 (SOC1) examinations. In addition, SSAE16 reports are being required by many user organizations that outsource to service providers.

At Hancock & Dana, we specialize in SSAE16 examinations with a process that is customized for each client to efficiently highlight internal controls, processes, values and integrity.

Hancock & Dana partners with a national technology consulting firm to deliver SSAE16 services. This approach allows us to leverage our partner’s expertise in providing the appropriate depth of examination coverage in highly technical areas.

We provide three types of SSAE16 (SOC1) examinations:

SSAE16 (SOC1) Readiness Assessment – designed to assess a service organization’s preparedness for a Type II SSAE16 (SOC1) examination. Identifies controls that the service organization should either implement or improve before engaging in a Type II examination.
Type I SSAE16 (SOC1) Examination, Report on Controls Placed in Operation – reports on a service organization’s description of the controls that may be relevant to a user organization’s internal control. Provides third-party verification as to whether such controls were suitably designed to achieve specified control objectives, and whether they had been placed in operation as of a specific date.
Type II SSAE16 (SOC1) Examination, Report on Controls in Operation and Tests of Operating Effectiveness – reports on a service organization’s description of the controls that may be relevant to a user organization’s internal control. Provides third-party verification as to whether such controls were suitably designed to achieve specified control objectives, on whether they had been placed in operation as of a specific date, and whether the controls that were tested were operating with sufficient effectiveness to provide reasonable, but not absolute assurance that the related control objectives were achieved during the period specified.

Home I About I Our Professionals I Services I Industries I Careers I Stewardship I Contact Us I Resources I Privacy Policy