# ISAE 3402 Type II

An **ISAE 3402 Type II assurance report** is an independent audit report that assesses the effectiveness of a service organization’s internal controls over a specific period, typically related to financial reporting. This report is based on the International Standard on Assurance Engagements (ISAE) 3402 and is commonly used by service organizations to demonstrate to clients that they have reliable controls in place.

Key components of an ISAE 3402 Type II report include:

1. **Management Assertion**: A statement from the service organization’s management regarding the controls' design and implementation.
2. **Scope and Objectives**: Defines the systems, processes, and time period covered in the report.
3. **Description of Controls**: An outline of the controls implemented, typically covering areas like access management, data processing, and risk management.
4. **Auditor’s Opinion**: An independent auditor’s opinion on whether the controls are suitably designed and operating effectively over the specified period.
5. **Test Results**: Findings from testing the controls to determine their operational effectiveness, identifying any deficiencies or areas for improvement.

An ISAE 3402 Type II report offers a higher level of assurance than a Type I report by assessing not only the design but also the operating effectiveness of controls over time, giving clients confidence in the service provider’s ability to manage risks associated with financial reporting.

{% hint style="info" %}
Want to see the CERRIX ISAE 3402 Type II report? [Reach out to us](/about-cerrix/getting-support.md) and we will provide it.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cerrix.com/about-cerrix/trust-and-compliance/isae-3402-type-ii.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.