Management Assertion

Final
In relation to SOC reporting, management at your vendor states what the system is at a high-level and attests to what management has written in the System Description and Control Environment. This is required to be in a SOC report. The auditor then expresses an opinion on whether or not management’s assertion is accurate.

You should expect that issues or exceptions that have come to management’s attention can result in management’s assertion letter being modified. Look for “except for” or other exclusionary language that was added by management to the letter. It’s not always about what is in the SOC audit. It can many times be about what isn’t included in the audit.
Created By: Venminder Inc 08-13-2019
Last Updated By: Venminder Inc 05-13-2020
0 comments
0 Views
2 revisions
 

Permalink

https://www.thirdpartythinktank.com/glossary/management-assertion

Related Links

No Related Resource entered.