Pervasive―The effect or possible effect on the system of controls of, identified or undetected, deficiencies in the design of controls, misstatements in the description, deficiencies in implementation as designed or deviations in operating effectiveness …

Reasonable assurance engagement―An assurance engagement in which the assurance practitioner reduces engagement risk to an acceptably low level in the circumstances of the engagement as the basis for the assurance practitioner’s conclusion. The assurance …

Representation―Statement by the responsible party, either oral or written, provided to the assurance practitioner to confirm certain matters or to support other evidence. A representation is additional to but may be provided in combination with the …

Responsible party―The party responsible for the underlying subject matter, being the design, description, implementation or operating effectiveness of controls in an assurance engagement on …

Sampling―The application of assurance procedures to less than 100% of items within a population of relevance to the engagement such that all sampling units have a chance of selection in order to provide the assurance practitioner with a reasonable basis …

Sampling risk―The risk that the assurance practitioner’s conclusion based on a sample may be different from the conclusion if the entire population were subjected to the same assurance procedure. Sampling risk can lead to two types of erroneous …

Service organisation―A third party organisation (or segment of a third party organisation) that provides services to user entities that are likely to be relevant to user entities’ internal control as it relates to relevant external reporting, whether …

Short-form report―Assurance report including only the matters required under paragraph 89 of this ASAE. …

Specific control objective―Control objective expressed in sufficient detail such that controls can be designed to achieve that objective directly without further …

Statement―The outcome in writing of the responsible party or evaluator’s evaluation of the suitability of the design of controls to achieve the control objectives, and, if included in the scope of the engagement, the fair presentation of the description …