SSAEs - Compliance Attestation

Question 1

Definition and Applicability

Answer 1

When reporting on an entity’s written assertion about compliance with requirements of laws, regulations, or contracts; or an assertion about the effectiveness of its internal controls related to such compliance.
A. There are two types of engagements related to “compliance attestation:”—(1) examination; and (2) agreed-upon procedures (a “review” is not permitted!).
B. For either an examination or agreed-upon procedures engagement - obtain management’s written representations letter as evidence supporting the engagement

Question 2

Examination Reporting Structure

Answer 2

1. Introduction: identify nature of engagement and subject matter; state respective responsibilities of management and the accountant
2. Scope: reference AICPA standards (and not that the examination does not provide a legal determination)
3. Opinion - Express an opinion

Question 3

AUP Objective

Answer 3

To present specific findings to assist users in evaluating the entity’s compliance with specified requirements (or the effectiveness of internal control over compliance) based on agreed-upon procedures.

Question 4

AUP Reporting Structure

Answer 4

1. Identify the nature of engagement and subject matter; reference AICPA standards, and identify responsibilities of specific parties
2. enumerated procedures and findings
3. State disclaimer of opinion
4. Restrict distribution to specified parties