Page 219 - CA Final Audit Titanium Full Book. (With Cover Pages)
P. 219

CA Ravi Taori
         stated in that description and, in the case of a type 2 report, on the operating effectiveness of those controls, based
         on the service auditor’s procedures.
         6A. Engagement Accordance with SAE 3402: A statement that the engagement was performed in accordance
         with SAE 3402, “Assurance Reports on Controls at a Service Organization,” which requires that the service
         auditor comply with ethical requirements and plan and perform procedures to
         6B. Obtaining Reasonable Assurance: obtain reasonable assurance about whether, in all material respects, the
         service organization’s description of its system is fairly presented, and the controls are suitably designed and, in
         the case of a type 2 report, are operating effectively.
         6C.  Summary  of  Service  Auditor’s  Procedures:  A  summary  of  the  service  auditor’s  procedures  to  obtain
         reasonable assurance and a statement of the service auditor’s belief that the evidence obtained is sufficient and
         appropriate to provide a basis for the service auditor’s opinion, and, in the case of a type 1 report, a statement
         that the service auditor has not performed any procedures regarding, the operating effectiveness of controls and
         therefore no opinion is expressed thereon.
         6D. Statement of Controls Limitations: A statement of the limitations of controls and, in the case of a type 2
         report of the risk of projecting to future periods any evaluation of the operating effectiveness of controls.
         7. Opinion
         The service auditor’s opinion, expressed in the  positive form, on whether, in all material respects, based on
         suitable criteria:
         8. Statement on Users of Report: A statement that the report and, in the case of a type 2 report, the description
         of tests of controls are intended only for user entities and their auditors, who have a sufficient understanding to
         consider  it,  along  with  other  information  including  information  about  controls  operated  by  user  entities
         themselves, when assessing the risks of material misstatements of user entities’ financial statements.
         In the case of a type 2 report:
         Fairness:  The  description  fairly  presents  the  service  organization’s  system  that  had  been  designed  and
         implemented throughout the specified period.
         Suitability: The controls related to the control objectives stated in the service organization’s description of its
         system were suitably designed throughout the specified period; and
         Effectiveness: The controls tested, which were those necessary to provide reasonable assurance that the control
         objectives stated in the description were achieved, operated effectively throughout the specified period.

         In the case of a type 1 report:
         Fairness:  The  description  fairly  presents  the  service  organization’s  system  that  had  been  designed  and
         implemented as at the specified date and
         Suitability: The controls related to the control objectives stated in the service organization’s description of its
         system were suitably designed as at the specified date.
         Date: The date of the service auditor’s assurance report, which shall be no earlier than the date on which the
         service auditor has obtained sufficient appropriate evidence on which to base the opinion.
         Signature: The report should be signed by the practitioner.
         Place: The report should name specific location, which is ordinarily the city where the report is signed.
         Additional matters requiring reporting in type 2 report:
         Additional Reporting in Type 2 Report: In the case of a type 2 report, the service auditor’s assurance report
         shall include a separate section after the opinion, or an attachment, that describes the tests of controls that were
         performed and the results of those tests.
         Description of Control Tests: In describing the tests of controls, the service auditor shall clearly state which
         controls were tested, identify whether the items tested represent all or a selection of the items in the population,
         and indicate the nature of the tests in sufficient detail to enable user auditors to determine the effect of such tests
         on their risk assessments.



        www.auditguru.in                                                                                   11.11
   214   215   216   217   218   219   220   221   222   223   224