ePlus Completes Type 2 SSAE 16 Examination for OneSource Family of Software Products

ePlus inc.

today announced that it has successfully completed the Type 2 SSAE 16 (Statement on Standards for Attestation Engagements) examination for its OneSource family of software products that provide information technology acquisition, asset management, procurement, and catalog management software services. The Type 2 SSAE 16 examination, formally known as a Report on Controls at a Service Organization (SOC 1), represents that the engagement was performed in accordance with the standards established by the American Institute of Certified Public Accountants (AICPA). The SSAE 16 examination provides customers and auditors with an understanding that the description of services and solutions provided by ePlus are fairly presented. The Type 2 component of SSAE 16 provides an objective evaluation that ePlus' controls were operating effectively during the specified period of the examination. "This SSAE report provides an added layer of assurance for our customers and attests to the operational effectiveness of our asset management, IT procurement, and hosted eProcurement and supplier portal solutions," said Ken Farber, president of ePlus Systems. "ePlus is committed to testing our control and business continuity procedures throughout the year—which is an integral and on-going component of our delivery methodology." The ePlus SSAE 16 report, conducted by one of the nation's leading service audit firms specializing in SSAE 16 services, found that for the period of January 1, 2014 to September 30, 2014, the description of ePlus products and services as well as operating effectiveness of controls supporting ePlus' Hosted eProcurement and Supplier Portal, OneSource Asset Management (OSAM), and OneSource IT solutions provided "reasonable assurance" that the specified control objectives were achieved. The report includes the service auditor's opinion that: The description fairly presents the OneSource family of software products that was designed and implemented throughout the period of January 1, 2014 to September 30, 2014. The controls related to the control objectives stated in the description were suitably designed to provide reasonable assurance that the control objectives would be achieved if the controls operated effectively throughout the period of January 1, 2014 to September 30, 2014, and user entities applied the complementary user entity controls contemplated in the design of ePlus' controls throughout the period of January 1, 2014 to September 30, 2014. The controls tested, which together with the complementary user entity controls referred to in the scope paragraph of the report, if operating effectively, were those necessary to provide reasonable assurance that the control objectives stated in the description were achieved, operated effectively throughout the period of January 1, 2014 to September 30, 2014. For additional information about SSAE 16, visit https://www.brightline.com/soc1.