Skip to content

Your glossary for risk and compliance

Helpful definitions of all of the terms you need to know to better manage risk and compliance.

Cyber security
Compliance

What is SSAE 18?

SSAE 18 is a series of enhancements aimed to increase the usefulness and quality of SOC reports, now superseding SSAE 16. The changes made to the standard this time around will require companies to take more control and ownership of their own internal controls around the identification and classification of risk and appropriate management of third party vendor relationships. These changes, while not overly burdensome, will help close the loop on key areas that industry professionals noted gaps in many service organization's reports.

Clients use the SSAE 18 standard to pursue a SOC 1 report.