Under ASA 402 / ISA 402, when an entity uses a service organisation (for example, a cloud-based payroll bureau), a Type 2 report (e.g., a GS 007 / ISAE 3402 Type 2 report) provides assurance about:
- AThe financial position of the service organisation only
- BThe description and design of controls at a point in time, plus their operating effective…
- CThe user entity's overall going concern status
- DOnly the design of controls, with no testing of operating effectiveness