{"id":1343,"date":"2016-07-13T18:21:28","date_gmt":"2016-07-13T16:21:28","guid":{"rendered":"http:\/\/risicopraktijk.nl\/?page_id=1343"},"modified":"2018-06-25T00:46:07","modified_gmt":"2018-06-24T22:46:07","slug":"sae3402","status":"publish","type":"page","link":"https:\/\/risicopraktijk.nl\/en\/onze-diensten\/sae3402\/","title":{"rendered":"SAE 3402"},"content":{"rendered":"<p><\/p>\n<h1>Outsourcing<\/h1>\n<p>When outsourcing (parts of) ICT, it is vitally important that the service delivery organisation is dependable, because the outsourcing company remains responsible for the activities they have outsourced.<\/p>\n<h1>Benefits of ISAE 3402<\/h1>\n<p>SAE 3402 is the International Standard on Assurance Engagements number 3402. An ISAE 3402 audit report offers service delivery organisations the following benefits and opportunities:<\/p>\n<h4>Offering assurance to clients<\/h4>\n<div id=\"attachment_1346\" style=\"width: 240px\" class=\"wp-caption alignright\"><a href=\"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2016\/07\/ISAE3402.png?ssl=1\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-1346\" data-attachment-id=\"1346\" data-permalink=\"https:\/\/risicopraktijk.nl\/en\/onze-diensten\/sae3402\/isae3402\/\" data-orig-file=\"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2016\/07\/ISAE3402.png?fit=2598%2C2365&amp;ssl=1\" data-orig-size=\"2598,2365\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"ISAE3402\" data-image-description=\"\" data-image-caption=\"&lt;p&gt;Certified&lt;br \/&gt;\nde Risicopraktijk&lt;\/p&gt;\n\" data-medium-file=\"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2016\/07\/ISAE3402.png?fit=300%2C273&amp;ssl=1\" data-large-file=\"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2016\/07\/ISAE3402.png?fit=640%2C583&amp;ssl=1\" class=\" wp-image-1346\" src=\"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2016\/07\/ISAE3402-300x273.png?resize=230%2C210\" alt=\"Certified de Risicopraktijk\" width=\"230\" height=\"210\" srcset=\"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2016\/07\/ISAE3402.png?resize=300%2C273&amp;ssl=1 300w, https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2016\/07\/ISAE3402.png?resize=768%2C699&amp;ssl=1 768w, https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2016\/07\/ISAE3402.png?resize=1024%2C932&amp;ssl=1 1024w, https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2016\/07\/ISAE3402.png?w=1280&amp;ssl=1 1280w, https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2016\/07\/ISAE3402.png?w=1920&amp;ssl=1 1920w\" sizes=\"auto, (max-width: 230px) 100vw, 230px\" \/><\/a><p id=\"caption-attachment-1346\" class=\"wp-caption-text\">Certified<br \/>Risk Practice<\/p><\/div>\n<p>It is important for the service delivery organisation to be able to demonstrate that they control the services they provide to the highest standard. An ISAE 3402 report allows ICT service provides to objectively assure their clients.<\/p>\n<h4>Increasing the quality of internal control<\/h4>\n<p>An ISAE 3402 report charts the goals, processes, risks en measures of a service delivery organisation. Potential risks are defined as well as the measures to diminish or eliminate these risks.<\/p>\n<h4>Improving chances of success in procurement tenders<\/h4>\n<p>Increasingly, an ISAE 3402 report is among the selection criteria in procurement procedures. Having this report is a clear commercial advantage over the competition who do not have one.<\/p>\n<h4>Internationally recognised<\/h4>\n<p>ISAE 3402 is the international standard for outsourcing. It prevents you from having to conform to different local standards. More and more, supervisory institutions demand control of the entire international supply chain (including service provides like application providers, data centers and cloud providers. Financial institutions demand ISAE 3402 as standard reporting from suppliers.<\/p>\n<h4>Decreasing audit costs<\/h4>\n<p>ISAE 3402 is a unique standard which is internationally accepted by auditors. This eliminates repetitive control work in the supply chain as the auditor of the client can depend on the 3402 statement of the service provider\u2019s auditor.<\/p>\n<h2>Drafting and certifying an ISAE 3402 report<\/h2>\n<p>Professionally describing processes and control in your organisation requires a substantial effort. Realising an ISAE 3402 report with the support of the Risk Practice will provide a professional result at ultimately lower cost. We will work with you to chart out the most significant risks and document these in a risk matrix. We then create additional measures to guarantee the control goals. We guide you through the audit process to ensure it meets de ISAE 3402 reporting timelines. Should you choose to create the report internally, we can provide the certific<a href=\"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2015\/04\/NOREA.png?ssl=1\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" data-attachment-id=\"514\" data-permalink=\"https:\/\/risicopraktijk.nl\/en\/onze-diensten\/digid-assessments\/norea\/\" data-orig-file=\"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2015\/04\/NOREA.png?fit=223%2C67&amp;ssl=1\" data-orig-size=\"223,67\" data-comments-opened=\"0\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"NOREA\" data-image-description=\"\" data-image-caption=\"\" data-medium-file=\"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2015\/04\/NOREA.png?fit=223%2C67&amp;ssl=1\" data-large-file=\"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2015\/04\/NOREA.png?fit=223%2C67&amp;ssl=1\" class=\"alignright size-full wp-image-514\" src=\"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2015\/04\/NOREA.png?resize=223%2C67&#038;ssl=1\" alt=\"NOREA\" width=\"223\" height=\"67\" \/><\/a>ation for you. We have NOREA certified auditors who are accomplished in creating as well as certifying ISAE 3402 reports.<\/p>\n<h1><\/h1>\n<h2>For more information on ISAE 3402:<\/h2>\n<p>If you would like to know more about wat our Risk Practice can mean for you, please contact <strong>Michael Schoevaart RE RA at (+31)(0)637602737<\/strong>. He would be pleased to tell you what added value ISAE 3402 can bring to your organisation.<\/p>","protected":false},"excerpt":{"rendered":"<p>Outsourcing When outsourcing (parts of) ICT, it is vitally important that the service delivery organisation is dependable, because the outsourcing company remains responsible for the activities they have outsourced. Benefits of ISAE 3402 SAE 3402 is the International Standard on Assurance Engagements number 3402. An ISAE 3402 audit report offers service delivery organisations the following benefits and opportunities: Offering assurance to clients It is important for the service delivery organisation to be able to demonstrate that they control the services&hellip;<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":92,"menu_order":1,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1343","page","type-page","status-publish","hentry"],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/P6P7jW-lF","jetpack-related-posts":[{"id":281,"url":"https:\/\/risicopraktijk.nl\/en\/onze-diensten\/risicomanagement-as-a-service\/","url_meta":{"origin":1343,"position":0},"title":"Risk Management as a service","author":"admin","date":"Saturday March  7th, 2015","format":false,"excerpt":"Risk Management as a service (RMAS) is an interesting outsourcing solution. Outsourcing provides greater chances of success by turning risks and opportunities into visible results. Why ? Because the risk management programme is designed, developed, implemented and reviewed by risk management professionals and therefore, improves the quality of your overall\u2026","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"Schermafdruk 2015-10-06 15.28.55","src":"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2015\/10\/Schermafdruk-2015-10-06-15.28.55-150x150.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":328,"url":"https:\/\/risicopraktijk.nl\/en\/onze-diensten\/digid-assessments\/","url_meta":{"origin":1343,"position":1},"title":"DigiD assessment","author":"Risk Expert","date":"Tuesday April 14th, 2015","format":false,"excerpt":"Government institutions and companies are increasingly using DigiD. Because DigiD allows citizens to securely gain virtual access to public services provided by municipalities, tax authorities and hospitals. Does your organisation have a connection to DigiD ? Than you must undertake an annual risk assessment to show that your DigiD web\u2026","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"digid","src":"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2015\/04\/digid.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":92,"url":"https:\/\/risicopraktijk.nl\/en\/onze-diensten\/","url_meta":{"origin":1343,"position":2},"title":"Services","author":"admin","date":"Friday November  7th, 2014","format":false,"excerpt":"We\u00a0 provide integrated\u00a0 solutions in the field of risk management. We help corporations and public agencies to evaluate and manage risk throughout the world. Whether it concerns the (risk management) skills of your professional staff,\u00a0 the challenges across every stage of your risk management process, or an interim solution for\u2026","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":113,"url":"https:\/\/risicopraktijk.nl\/en\/onze-diensten\/risk-management-training\/","url_meta":{"origin":1343,"position":3},"title":"Training &#038; Development","author":"admin","date":"Friday November  7th, 2014","format":false,"excerpt":"Where do you stand with risk management and have you set course to put your people in motion? Bringing your risk management to the next level through education, training and coaching is our passion.\u00a0We specialise in: Change management programmes for risk management teams Personal development programmes for Risk managers Inspirational\u2026","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"Schermafdruk 2015-10-06 15.29.34","src":"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2015\/10\/Schermafdruk-2015-10-06-15.29.34-150x150.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":115,"url":"https:\/\/risicopraktijk.nl\/en\/onze-diensten\/interim-risk-professionals\/","url_meta":{"origin":1343,"position":4},"title":"Interim risk professionals","author":"admin","date":"Friday November  7th, 2014","format":false,"excerpt":"We specialise in risk management and have a strong network of the best risk experts in EMEA. We are available for temporary replacement of your risk manager or interim management of your risk management department. Further more we are able to rig a complete made to measure professional risk management\u2026","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"Schermafdruk 2015-10-06 15.30.02","src":"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2015\/10\/Schermafdruk-2015-10-06-15.30.02-150x150.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":680,"url":"https:\/\/risicopraktijk.nl\/en\/onze-diensten\/iso-27001-certificering\/","url_meta":{"origin":1343,"position":5},"title":"ISO 27001 Assessment","author":"Risk Manager","date":"Monday October  5th, 2015","format":false,"excerpt":"Fishing, Cyber crime, Data leakage en DDoS attacks are\u00a0everyday's business nowadays. Are you concerned about the cyber crime risk that your company is facing and is it time for action ? Than consider to have a Cyber Security Assessment done against the ISO 27001 standard. ISO 27001 is the international\u2026","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"Hacker grey","src":"https:\/\/i0.wp.com\/risicopraktijk.nl\/wp-content\/uploads\/2015\/10\/Schermafdruk-2015-10-06-16.33.57-150x150.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]}],"_links":{"self":[{"href":"https:\/\/risicopraktijk.nl\/en\/wp-json\/wp\/v2\/pages\/1343","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/risicopraktijk.nl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/risicopraktijk.nl\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/risicopraktijk.nl\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/risicopraktijk.nl\/en\/wp-json\/wp\/v2\/comments?post=1343"}],"version-history":[{"count":14,"href":"https:\/\/risicopraktijk.nl\/en\/wp-json\/wp\/v2\/pages\/1343\/revisions"}],"predecessor-version":[{"id":1642,"href":"https:\/\/risicopraktijk.nl\/en\/wp-json\/wp\/v2\/pages\/1343\/revisions\/1642"}],"up":[{"embeddable":true,"href":"https:\/\/risicopraktijk.nl\/en\/wp-json\/wp\/v2\/pages\/92"}],"wp:attachment":[{"href":"https:\/\/risicopraktijk.nl\/en\/wp-json\/wp\/v2\/media?parent=1343"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}