Avit obtains ISAE 3402 Type 2 certification

The quality and reliability of Avit's managed services have been confirmed with the achievement of the ISAE 3402 Type 2 certification. More and more organizations are choosing to outsource (parts of) their IT infrastructure. Avit has built up a solid portfolio for this purpose. To assure customers of its ability to manage the IT environment, Avit recently obtained an ISAE 3402 Type 2 certification for the year 2023. In this blog, you will read what ISAE 3402 entails and why it is important to comply with this standard.

What is ISAE 3402?

 ISAE 3402 is an auditing standard for reporting on outsourced processes. ISAE stands for International Standard for Assurance Engagements. It demonstrates to supervisors and chain partners that a company has control over its services. Initially for financial reliability, now also for general reliability, continuity, and information security of services. All accountants recognize and use ISAE 3402.

Why is ISAE 3402 important?

 Organizations are increasingly outsourcing activities to service organizations such as Avit, which now take over not only supporting but also crucial IT processes and IT infrastructure. Which means a disruption can have a significant impact on the continuity of the outsourcing organization. Therefore, an outsourcing organization (user organization) seeks certainty, especially in areas such as risk management, cyber security, and privacy. ISAE 3402 statements provide Avit's customers with reassurance about the quality and reliability of outsourced IT services.

Statement without reservations

 Avit recently hosted auditors from an independent auditor who examined the Avit organization and its managed services in the context of an ISAE 3402 audit. This investigation focuses on the consistency of Avit's managed services in terms of design, existence, and operation. Operation means that it can be demonstrated that each case is handled in the same way when auditors take a sample. Twan van Ravestein, Information Security Officer at Avit, explains: "This is a thorough and extensive investigation. The result is a statement without reservations, which we can be proud of."

Not a single measurement moment but over a long period

 Avit obtained the ISAE 3402 Type 1 certificate on July 31, 2023, which is focused on a single measurement moment. With the recent addition of ISAE 3402 Type 2 on January 18, 2024, Avit has demonstrated over a longer period of six months that it meets the requirements. ISAE is especially important for customers in the financial sector and government, who are subject to laws and regulations that require them to secure agreements with external service providers. "This statement is indispensable for accountants who review the annual accounts of customers who have indeed outsourced IT services. And in tenders, ISAE 3402 Type 2 is increasingly becoming a hard requirement to be able to bid," says Twan van Ravestein. "We are proud that we have earned this important certification and that we have been able to show within six months that at Avit we really do what we promise."