Internal audit function―a function of an entity that performs assurance and consulting activities designed to evaluate and improve the effectiveness of the entity’s governance, risk management and internal control …

Internal auditors―those individuals who perform the activities of the internal audit function.  Internal auditors may belong to an internal audit department or equivalent …

Report on the description and design of controls at a service organisation (referred to in this ASAE as a “type 1 report”) ―a report that comprises: The service organisation’s description of its system; A written statement by the service organisation …

Report on the description, design and operating effectiveness of controls at a service organisation (referred to in this ASAE as a “type 2 report”) ―a report that comprises: The service organisation’s description of its system; A written statement by the …

Service auditor―an assurance practitioner who, at the request of the service organisation, provides an assurance report on controls at a service …

Service organisation―a third‑party organisation (or segment of a third‑party organisation) that provides services to user entities that are likely to be relevant to user entities’ internal control as it relates to financial …

Service organisation’s system (or the system) ―the policies and procedures designed and implemented by the service organisation to provide user entities with the services covered by the service auditor’s assurance report.  The service organisation’s …

Service organisation’s statement―the written statement about the matters referred to in paragraph  9(k)(ii) (or paragraph  9(j)(ii) in the case of a type 1 …

​​​​ Subservice organisation―a service organisation used by another service organisation to perform some of the services provided to user entities that are likely to be relevant to user entities’ internal control as it relates to financial …

​ Test of controls―a procedure designed to evaluate the operating effectiveness of controls in achieving the control objectives stated in the service organisation’s description of its …