SSAE-16: What Once Set You Apart Will Soon Be a Requirement

  • Email
  • Print
  • Printing Articles

    1. Click here to print!
    2. ...or print directly from your browser by choosing File > Print... from the menu or by pressing [Ctrl + P]. Our printer-friendly stylesheet will make sure extraneous website stuff isn't printed.
    3. You're done!

    Close this message.

  • Comments
  • RSS

The Consumer Financial Protection Bureau (CFPB) wants to see collection agency oversight over their vendors and affiliates. In the CFPB’s mind, you are as responsible for a compliance issue with a business partner as you are for compliance issues in your own shop. In fact, as far as the CFPB is concerned, there’s no difference, really, between a business partner and your own shop.

Companies in the financial services industry are being required to show adequate oversight of service providers – and an SSAE-16 Audit (formerly known as an SAS-70 Audit) – is one such mechanism to document this oversight.

SSAE stands for Statement on Standards for Attestation Engagements. It’s an exam, conducted by a service auditor CPA, to report on controls at organizations that provide services to those companies.

SSAE-16 Audits are used not just by potential clients; the CFPB uses them to gain an understanding of the control environment of outsourcing companies. SSAE-16 Audits are a part of the CFPB’s examination process.

Read the rest of the post on the Array Services Group blog.

  • Email
  • Print
  • Printing Articles

    1. Click here to print!
    2. ...or print directly from your browser by choosing File > Print... from the menu or by pressing [Ctrl + P]. Our printer-friendly stylesheet will make sure extraneous website stuff isn't printed.
    3. You're done!

    Close this message.

  • Comments
  • RSS

Posted in CFPB, Collection Laws and Regulations, Collection Technology, Data Security, Opinion .

×
Subscribe to our email newsletters

Continuing the Discussion

We welcome and encourage readers to comment and engage in substantive exchanges over topics on insideARM.com. Users must always follow our Terms of Use. Also know that your comment will be deleted if you: use profanity, engage in any kind of hate speech, post an incoherent or irrelevant thought, make a point of targeting anyone, or do anything else we find unsavory. Your comment will be posted under your current Display Name, shown below. If you'd like to change your Display Name, you must update it on the My Profile page.

Leave a Reply