• SSAE 18 Audit Checklist Form

    Track key activities when preparing for or conducting an SSAE 18 audit.
  • Define the audit scope, applicable service organization(s), and review period.
  • Document the system description and services in scope.
  • Identify relevant risks and map them to controls.
  • Review governance, the control environment, and assigned responsibilities.
  • Review user access controls and access reviews.
  • Review change management and system development controls.
  • Review system operations, including monitoring, backups, and incident handling.
  • Review third-party and vendor controls relevant to the service.
  • Gather and organize supporting evidence, including control descriptions and test results.
  • Record exceptions, remediation actions, and follow-up.
  • Should be Empty:
Select theme: