
{"id":3242,"date":"2017-07-25T00:00:00","date_gmt":"2017-07-25T00:00:00","guid":{"rendered":"http:\/\/otava.test\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/"},"modified":"2017-07-25T00:00:00","modified_gmt":"2017-07-25T00:00:00","slug":"ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard","status":"publish","type":"post","link":"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/","title":{"rendered":"SSAE 18 vs SSAE 16: Key differences in the new SOC 1 standard"},"content":{"rendered":"<figure id=\"attachment_17332\" aria-describedby=\"caption-attachment-17332\" style=\"width: 150px\" class=\"wp-caption alignright\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-17332\" src=\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/david-barton-UHY-BLOG.jpg\" alt=\"David Barton, UHY Advisors\" width=\"150\" height=\"210\" \/><figcaption id=\"caption-attachment-17332\" class=\"wp-caption-text\">David Barton<\/figcaption><\/figure>\n<p><em>Note: This is a guest post by David Barton, of UHY Advisors, one of the largest professional services and accounting firms.\u00a0<\/em><\/p>\n<p>The AICPA has replaced the audit standard known as <a href=\"https:\/\/www.onlinetech.com\/ssae-16-hosting\" target=\"_blank\" rel=\"noopener noreferrer\">SSAE 16<\/a> with a new standard effective for report dates on or after May 1, 2017. This new standard, known as SSAE 18, is designed to address and clarify concerns over the clarity, length and complexity of the many other AICPA standards.<\/p>\n<p>Before we get into the details around the new standard it is important to note that SSAE 18 combines several prior SSAEs that were not related to SSAE 16. SSAE 16 was specific to <a href=\"https:\/\/otavawebsite.wpengine.com\/blog\/soc-1-soc-2-soc-3-report-comparison\/\" target=\"_blank\" rel=\"noopener noreferrer\">SOC 1 reports<\/a> which deal with the controls at a service organization that impact financial reporting of the customers of the service organization. By contrast, SSAE 18 refers to many different types of attestation reports, not just SOC 1 reports.<\/p>\n<p>Many customers and other stakeholders have referred to SOC 1 reports as \u201cSSAE 16\u201d reports. Since there will now be many different reports produced under SSAE 18, we need to begin referring to these attestation reports by their proper name (such as SOC 1, <a href=\"https:\/\/otavawebsite.wpengine.com\/blog\/what-is-a-service-organization-control-soc-2-report\/\">SOC 2<\/a>, etc.) and not by the standard that is used to produce them.<\/p>\n<p>Below are answers to common questions about the new standard and SOC reporting in general, to help you understand what to look for in an auditor or auditing firm.<\/p>\n<p><a href=\"https:\/\/web.otava.com\/pci-compliant-data-needs\"><img loading=\"lazy\" decoding=\"async\" class=\"alignright wp-image-17525 size-full\" src=\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/blog-pci-cta.jpg\" alt=\"pci white paper offer\" width=\"815\" height=\"397\" \/><\/a><\/p>\n<h2><span class=\"ez-toc-section\" id=\"What_is_SSAE_18\"><\/span>What is SSAE 18?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>SSAE 18 is the short name for Statement on Standards for Attestation Engagements No. 18. Attestation standards establish requirements and provide application guidance to auditors for performing and reporting on examination, review, and agreed-upon procedures engagements, including Service Organization Controls (SOC) attestations. SSAE 18 completely replaces SSAE 16 and many other SSAEs into a combined standard.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"What_SSAE_18_is_NOT\"><\/span>What SSAE 18 is NOT:<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>SSAE 18 is NOT a certification. Neither was SSAE 16 or <a href=\"https:\/\/otavawebsite.wpengine.com\/reference\/sas-70-ssae-16-and-soc-comparison\/\">SAS 70<\/a> that preceded it. There is no such thing as \u201cSSAE 18 certified\u201d and service organizations that use this terminology are merely misleading their customers and stakeholders. SSAE 18 is only the name of the standard used by audit practitioners to perform a variety of attestation reports. Lastly, it is not specific to a certain type of attestation report (a la SSAE 16).<\/p>\n<h2><span class=\"ez-toc-section\" id=\"How_is_SSAE_18_different\"><\/span>How is SSAE 18 different?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>There are a few key changes for customers and other stakeholders that read SOC reports to take note of. There are several changes that impact the way service organizations deal with subservice organizations. What is a subservice organization? Before we answer that, let&#8217;s back up and define what a service organization is.<\/p>\n<p>A <strong>service organization<\/strong> is an entity that provides services (think <a href=\"https:\/\/otavawebsite.wpengine.com\/solutions\/cloud\/\" target=\"_blank\" rel=\"noopener noreferrer\">cloud hosting<\/a>, <a href=\"https:\/\/otavawebsite.wpengine.com\/solutions\/colocation\/\" target=\"_blank\" rel=\"noopener noreferrer\">colocation<\/a>, payroll processing, etc.) to another organization. <strong>A subservice organization<\/strong> goes one level deeper&#8211;it&#8217;s<em> a <\/em>service organization used by the original service organization to perform services. For example, if your cloud provider \u201cA\u201d uses another Company \u201cB\u201d&#8217;s data center to host their servers, then Company B is a subservice organization.<\/p>\n<p>SSAE 18 addresses the importance of accurately disclosing the relationship between the service organization and the subservice organization.\u00a0 Under SSAE 18 a service organization should:<\/p>\n<ol>\n<li>Identify all subservice organizations used in providing the services<\/li>\n<li>Include a description of any subservice organization controls (referred to as Complementary Subservice Organization Controls) that the service organization relies on to provide the primary services to its customers<\/li>\n<\/ol>\n<p>SSAE 18 also requires a service organization to provide the service auditor with a risk assessment that highlights the organization\u2019s key internal risks. This risk assessment helps ensure that the service organization\u2019s controls are regularly reviewed, addresses appropriate risks, and are updated as necessary to mitigate risks.<\/p>\n<p>The last key change brought about by SSAE 18 has to do with monitoring the controls at subservice organizations. It is no longer considered sufficient for service organizations to vet their subservice organizations during the initial buying process and then never check on them again. SSAE 18 requires the:<\/p>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol>\n<li>service organization implement controls to monitor the effectiveness of relevant controls at the subservice organization; and<\/li>\n<li>service auditor to report on the controls the service organization implemented to monitor the relevant controls at the subservice organization.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<p>Monitoring controls could include one or any combination of the following:<\/p>\n<ol>\n<li>Reviewing and reconciling output reports or files<\/li>\n<li>Periodic discussion with subservice organization personnel<\/li>\n<li>Regular site visits<\/li>\n<li>Testing controls at the subservice organization<\/li>\n<li>Monitoring external communications<\/li>\n<li>Reviewing SOC reports of the subservice organization\u2019s system<\/li>\n<\/ol>\n<h2><span class=\"ez-toc-section\" id=\"What_impact_does_SSAE_18_have_for_Online_Tech\"><\/span>What impact does SSAE 18 have for Online Tech?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Working with our auditors, UHY LLP, we will ensure that our <a href=\"https:\/\/otavawebsite.wpengine.com\/compliance-security\/soc-1-2-3-compliant-cloud\/\" target=\"_blank\" rel=\"noopener noreferrer\">SOC 1 report<\/a> (as well as our other attestation reports) includes all of the necessary updates and changes related to the adoption of SSAE 18.\u00a0 We strive to deliver reports that are timely, accurate, and complete so that our customers can be assured our controls measure up to the expectations of the marketplace.<\/p>\n<p><strong>Are you looking for SSAE 18 hosting?<\/strong> <a href=\"https:\/\/otavawebsite.wpengine.com\/contact\/\" target=\"_blank\" rel=\"noopener noreferrer\">Contact us<\/a> to learn more!<\/p>\n<p>Read more about SSAE 18 here:\u00a0<a href=\"https:\/\/www.aicpa.org\/Research\/Standards\/AuditAttest\/DownloadableDocuments\/SSAE_No_18.pdf\">https:\/\/www.aicpa.org\/Research\/Standards\/AuditAttest\/DownloadableDocuments\/SSAE_No_18.pdf<\/a><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Note: This is a guest post by David Barton, of UHY Advisors, one of the largest professional services and accounting firms.\u00a0 The AICPA has replaced the audit standard known as SSAE 16 with a new standard effective for report dates on or after May 1, 2017. This new standard, known as SSAE 18, is designed to address and clarify concerns over the clarity, length and complexity of the many other AICPA standards. Before we get into the details around the new standard it is important to note that SSAE 18 combines several prior SSAEs that were not related to SSAE 16. SSAE 16 was specific to SOC 1 reports which deal with the controls at a service organization that impact financial reporting of the customers of the service organization. By contrast, SSAE 18 refers to many different types of attestation reports, not just SOC 1 reports. Many customers and other stakeholders have referred to SOC 1 reports as \u201cSSAE 16\u201d reports. Since there will now be many different reports produced under SSAE 18, we need to begin referring to these attestation reports by their proper name (such as SOC 1, SOC 2, etc.) and not by the standard that is&#8230;<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"other_category":[],"class_list":["post-3242","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.2 (Yoast SEO v27.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>SSAE 16 Vs SSAE 18: Statement on Standards for Attestation Engagement<\/title>\n<meta name=\"description\" content=\"Otava can help you understand the difference between SSAE 16 and SSAE 18. Learn about cloud computing data standards with us!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SSAE 18 vs SSAE 16: Key differences in the new SOC 1 standard\" \/>\n<meta property=\"og:description\" content=\"Otava can help you understand the difference between SSAE 16 and SSAE 18. Learn about cloud computing data standards with us!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/\" \/>\n<meta property=\"og:site_name\" content=\"OTAVA\" \/>\n<meta property=\"article:published_time\" content=\"2017-07-25T00:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/david-barton-UHY-BLOG.jpg\" \/>\n<meta name=\"author\" content=\"Irma Brillantes\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Irma Brillantes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/\"},\"author\":{\"name\":\"Irma Brillantes\",\"@id\":\"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263\"},\"headline\":\"SSAE 18 vs SSAE 16: Key differences in the new SOC 1 standard\",\"datePublished\":\"2017-07-25T00:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/\"},\"wordCount\":821,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.otava.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/david-barton-UHY-BLOG.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/\",\"url\":\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/\",\"name\":\"SSAE 16 Vs SSAE 18: Statement on Standards for Attestation Engagement\",\"isPartOf\":{\"@id\":\"https:\/\/www.otava.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/david-barton-UHY-BLOG.jpg\",\"datePublished\":\"2017-07-25T00:00:00+00:00\",\"description\":\"Otava can help you understand the difference between SSAE 16 and SSAE 18. Learn about cloud computing data standards with us!\",\"breadcrumb\":{\"@id\":\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#primaryimage\",\"url\":\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/david-barton-UHY-BLOG.jpg\",\"contentUrl\":\"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/david-barton-UHY-BLOG.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.otava.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SSAE 18 vs SSAE 16: Key differences in the new SOC 1 standard\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.otava.com\/#website\",\"url\":\"https:\/\/www.otava.com\/\",\"name\":\"OTAVA\u00ae\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.otava.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.otava.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.otava.com\/#organization\",\"name\":\"OTAVA\u00ae\",\"url\":\"https:\/\/www.otava.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.otava.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg\",\"contentUrl\":\"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg\",\"caption\":\"OTAVA\u00ae\"},\"image\":{\"@id\":\"https:\/\/www.otava.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263\",\"name\":\"Irma Brillantes\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g\",\"caption\":\"Irma Brillantes\"},\"url\":\"https:\/\/www.otava.com\/blog\/author\/ibrillantesotava-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SSAE 16 Vs SSAE 18: Statement on Standards for Attestation Engagement","description":"Otava can help you understand the difference between SSAE 16 and SSAE 18. Learn about cloud computing data standards with us!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/","og_locale":"en_US","og_type":"article","og_title":"SSAE 18 vs SSAE 16: Key differences in the new SOC 1 standard","og_description":"Otava can help you understand the difference between SSAE 16 and SSAE 18. Learn about cloud computing data standards with us!","og_url":"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/","og_site_name":"OTAVA","article_published_time":"2017-07-25T00:00:00+00:00","og_image":[{"url":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/david-barton-UHY-BLOG.jpg","type":"","width":"","height":""}],"author":"Irma Brillantes","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Irma Brillantes","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#article","isPartOf":{"@id":"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/"},"author":{"name":"Irma Brillantes","@id":"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263"},"headline":"SSAE 18 vs SSAE 16: Key differences in the new SOC 1 standard","datePublished":"2017-07-25T00:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/"},"wordCount":821,"commentCount":0,"publisher":{"@id":"https:\/\/www.otava.com\/#organization"},"image":{"@id":"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#primaryimage"},"thumbnailUrl":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/david-barton-UHY-BLOG.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/","url":"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/","name":"SSAE 16 Vs SSAE 18: Statement on Standards for Attestation Engagement","isPartOf":{"@id":"https:\/\/www.otava.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#primaryimage"},"image":{"@id":"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#primaryimage"},"thumbnailUrl":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/david-barton-UHY-BLOG.jpg","datePublished":"2017-07-25T00:00:00+00:00","description":"Otava can help you understand the difference between SSAE 16 and SSAE 18. Learn about cloud computing data standards with us!","breadcrumb":{"@id":"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#primaryimage","url":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/david-barton-UHY-BLOG.jpg","contentUrl":"https:\/\/otava.test\/wp-content\/uploads\/2019\/04\/david-barton-UHY-BLOG.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.otava.com\/blog\/ssae-18-vs-ssae-16-key-differences-in-the-new-soc-1-standard\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.otava.com\/"},{"@type":"ListItem","position":2,"name":"SSAE 18 vs SSAE 16: Key differences in the new SOC 1 standard"}]},{"@type":"WebSite","@id":"https:\/\/www.otava.com\/#website","url":"https:\/\/www.otava.com\/","name":"OTAVA\u00ae","description":"","publisher":{"@id":"https:\/\/www.otava.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.otava.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.otava.com\/#organization","name":"OTAVA\u00ae","url":"https:\/\/www.otava.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.otava.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg","contentUrl":"https:\/\/www.otava.com\/wp-content\/uploads\/2025\/03\/otava-logo.svg","caption":"OTAVA\u00ae"},"image":{"@id":"https:\/\/www.otava.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.otava.com\/#\/schema\/person\/35774075f8f4fcdd4eae80cb72034263","name":"Irma Brillantes","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d5251bebc1699793a698d1a6158603cb3cdc50a095a12357e42d415b3e5546c2?s=96&d=mm&r=g","caption":"Irma Brillantes"},"url":"https:\/\/www.otava.com\/blog\/author\/ibrillantesotava-com\/"}]}},"_links":{"self":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/posts\/3242","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/comments?post=3242"}],"version-history":[{"count":0,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/posts\/3242\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/media?parent=3242"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/categories?post=3242"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/tags?post=3242"},{"taxonomy":"other_category","embeddable":true,"href":"https:\/\/www.otava.com\/wp-json\/wp\/v2\/other_category?post=3242"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}