SSAE means Statement on Standards for Attestation Engagements.
SSAE has the meaning set forth in Section 11.04.
SSAE means Statement on Standards for Attestation Engagements. 2. Protection of the State’s Confidential Information. Throughout the Term and at all times in connection with its actual or required performance of the Services, Contractor will: 2.1. the Software and State data must be hosted in a government cloud solution, and Contractor must maintain an annual SSAE 18 SOC 2 Type 2 audit for the Hosted Services throughout the Term maintain FedRAMP certification for the Hosted Services throughout the Term, and in the event the contractor is unable to maintain FedRAMP certification, the State may move the Software and State data to an alternative provider, at contractor’s sole cost and expense; 2.2. ensure that the Software and State Data is securely hosted, supported, administered, and accessed in a data center and backup data center that resides in the continental United States, and minimally meets Uptime Institute Tier 3 standards (www.uptimeinstitute.com), or its equivalent; 2.3. maintain and enforce an information security program including safety and physical and technical security policies and procedures with respect to its Processing of the State’s Confidential Information that comply with the requirements of the State’s data security policies as set forth in the Contract, and must, at a minimum, remain compliant with FISMA and the NIST Special Publication 800.53 (most recent version) MOD Controls using minimum control values as established in the applicable PSP, and must, at a minimum, remain compliant with FISMA and the NIST Special Publication 800.53 (most recent version) HIGH Controls using minimum control values as established in the applicable PSP; 2.4. provide technical and organizational safeguards against accidental, unlawful or unauthorized access to or use, destruction, loss, alteration, disclosure, transfer, commingling or processing of such information that ensure a level of security appropriate to the risks presented by the processing of the State’s Confidential Information and the nature of such Confidential Information, consistent with best industry practice and standards; 2.5. take all reasonable measures to:
Examples of SSAE in a sentence
Vendor represents and warrants that Vendor will maintain compliance with the SSAE 16 standard, and shall undertake any audits and risk assessments Vendor deems necessary to maintain compliance with SSAE16.
The University will utilize all invoicing and documentation, which relates to Kent State University’s final cost, and internal controls documentation required under the contract including, but not limited to any applicable audit or security assessment reports or certifications such as: SAS 70 or its replacement SSAE 16, SOC 2, or ISO 27001, and copies of any applicable corporate information security policies or other supporting documentation.
Tarrant County reserves the right to audit vendor data centers which house Tarrant County Data or receive SSAE 16 SOC Type II audits from a reputable security advisory service firm (e.g. EY, Deloitte, KPMG, PWC, Coalfire, etc.).
Include a copy of any applicable audit or security assessment reports or certifications such as: SSAE 16, SOC 2, or ISO 27001 and include copies of any applicable corporate information security policies or other supporting documentation that will substantiate the questionnaire responses.
Tarrant County reserves the right to audit Vendor datacenters which house Tarrant County Data or receive SSAE 16 SOC Type II audits from a reputable security advisory service firm (e.g. EY, Deloitte, KPMG, PWC, Coalfire, etc.).
More Definitions of SSAE
SSAE means Statements on Standards for Attestation Engagements;
SSAE means Statements on Standards for Attestation Engagements promulgated by the
SSAE means Statement on Standards for Attestation Engagements. “STARS” means Store Tracking and Redemption Subsystem File. “TANF” means Temporary Assistance for Needy Families.
SSAE means Statement on Standards for Attestation Engagements.2. Contractor will appoint a Contractor employee to respond to the State’s inquiries regarding the security of the Contractor Systems who has sufficient knowledge of the security of the Contractor Systems and the authority to act on behalf of Contractor in matters pertaining thereto (“Contractor Security Officer”).3. Protection of the State’s Confidential Information. Throughout the Term and at all times in connection with its actual or required performance of the Services, Contractor will:3.1. All Hosting Providers must maintain compliance with the standards set forth in Section 3.4 below. 3.2. Contractor must maintain an annual SSAE 18 SOC 2 Type 2 audit for the Hosted Services throughout the Term; 3.3. ensure that the Software is securely hosted, supported, administered, and accessed in a data center that resides in the continental United States (acknowledging that Contractor is a global company and that certain voice authorization calls will be transferred to its European call centers overnight), and a primary data center that minimally meets Uptime Institute Tier 3 standards (www.uptimeinstitute.com), or its equivalent;3.4. maintain and enforce an information security program including safety and physical and technical security policies and procedures with respect to its Processing of the State’s Confidential Information that comply with Contractor Policy and industry standards, and must, at a minimum, remain compliant with the applicable legal, regulatory and contractual requirements including Gramm- Leach-Bliley Act (“GLBA”), Payment Card Industry (“PCI”), Health Insurance Portability and Accountability Act (“HIPAA”), Sarbanes-Oxley Act (“SOX”) and the National Institute of Standards and Technology (“NIST”) Cybersecurity Framework and NIST SP 800-53 MOD controls (noting that Contractor is currently in the planning and testing phase and working toward full certification for Revision 4 with compliance to be obtained by 7-1-2021);3.5. provide technical and organizational safeguards against accidental, unlawful or unauthorized access to or use, destruction, loss, alteration, disclosure, transfer, commingling or processing of such information that ensure a level of security appropriate to the risks presented by the processing of the State’s Confidential Information and the nature of such Confidential Information, consistent with best industry practice and standards; 3.6. take all reasonable measure...
SSAE means the Statements on Standards for Attestation Engagements issued by the auditing standards board, the accounting and review services committee, and the consulting services executive committee of the American Institute of Certified Public Accountants.
SSAE shall have the meaning set forth in Section 11.5(c) of this Agreement.
SSAE means Statement on Standards for Attestation Engagements. 2. Contractor will appoint a Contractor employee to respond to the State’s inquiries regarding the security of the Contractor Systems who has sufficient knowledge of the security of the Contractor Systems and the authority to act on behalf of Contractor in matters pertaining thereto (“Contractor Security Officer”). The Contractor Security Officer will be considered Key Personnel under the Contract. 3. Protection of the State’s Confidential Information. Throughout the Term and at all times in connection with its actual or required performance of the Services, Contractor (including its Permitted Subcontractors, as required by Section 7.4 of the Contract) will:3.1 Require Permitted Subcontractors to maintain an annual SSAE 18 SOC 2 Type 2 audit for the Hosted Services throughout the Term and in the event the that either Contractor or Permitted Subcontractors fail to do so, the State may move the Software and data, including backup data, to an alternative provider, at Contractor’s sole cost and expense; 3.2 comply with the requirements of SOC 2 Type 2 Implementation Plan (Att. 1); 3.3 ensure that the Software and data, including backup data, is securely hosted, supported, administered, and accessed in a data center that resides in the continental United States, and minimally meets Uptime Institute Tier 3 standards (www.uptimeinstitute.com), or its equivalent; 3.4 maintain and enforce an information security program including safety and physical and technical security policies and procedures with respect to its Processing of the State’s Confidential Information that comply with the requirements of the State’s data security policies as set forth in the Contract, and must, at a minimum, remain compliant FISMA and NIST Special Publication 800.53 (most recent version) MOD Controls using minimum control values as established in the applicable PSP; 3.5 provide technical and organizational safeguards against accidental, unlawful or unauthorized access to or use, destruction, loss, alteration, disclosure, transfer, commingling or processing of such information that ensure a level of security appropriate to the risks presented by the processing of the State’s Confidential Information and the nature of such Confidential Information, consistent with best industry practice and standards; 3.6 take all reasonable measures to: