sarbanes oxley

Service organizations often issue SSAE 18 SOC reports with reporting periods inconsistent with user entity financial reporting years, creating a “gap” in the internal controls. For example, a SSAE 18 SOC 2