Service Organization Control (SOC) Reports
Since 2004, NCP has contracted with nationally recognized accounting firms to conduct annual SAS 70 Type II examinations; the scopes of which are defined to address matters clients consider most important.
The American Institute of Certified Public Accountants (AICPA) created the Statement on Standards for Attestation Engagements (SSAE) No. 16, which went into effect for service auditors' reporting periods ending on or after June 15, 2011.
SSAE 16 is an attestation standard that addresses engagements undertaken by a service auditor for reporting on controls at organizations that provide services to user entities, for which a service organization's controls are likely to be relevant and requires that the service organization provide a description of its system along with a written assertion by management, which was never required by SAS 70.
As of December 2011, NCP completed its Service Organization Control (SOC) 1 report in accordance with SSAE No. 16, which reports on NCP management's description of its system and the suitability of the design of controls.
For more information on AICPA, SSAE 16 and SOC, click here.