Subject matter or underlying subject matter―The controls within the system designed to achieve the control objectives, and, if included in the scope of the engagement, the description of the system, the controls implemented or the controls in …

System―The function or service at the entity, location or operational facility for which the controls are being reported upon by the assurance …

Test of controls―A procedure designed to evaluate the design, description, implementation or operating effectiveness of controls in achieving the identified control …

Tolerable rate of deviation―A rate of deviation in the operation of control procedures as designed in respect of which the assurance practitioner seeks to obtain an appropriate level of assurance that the rate of deviation set by the assurance …

User entity―An entity that uses a service organisation. …

For the purposes of this ASAE, terms have the same meaning as in ASAE 3000 and in addition, the following terms have the meanings attributed …

Attestation engagement on controls―A reasonable or limited assurance engagement in which a party other than the assurance practitioner, being the responsible party or evaluator, evaluates the design against the control objectives, and, if included in the …

Anomaly―A deviation in a sample that is demonstrably not representative of deviations in a population. …

Carve-out method―A method of dealing with controls operating at a third party, which are integral to the system or control component which is subject to the engagement, whereby that third party’s relevant control objectives and related controls are …

Compensating control―A control which makes up for a deficiency in another control in mitigating the risks that threaten achievement of a control …