What is ISAE-3000 Revised 3rd Party Attestation

If you’ve been with us for a while, you probably know that data integrity, accuracy and completeness are vital to what we do at Klappir. You may have also gotten word that we recently completed a third party attestation of our system description controls according to the ISAE-3000 (revised) standard. If you don’t know what that means, don’t worry, this short article is for you.

By Klappir

ISAE-3000 Revised 3rd Party Attestation of Klappir’s controls: what, how and why

What do we mean by “controls”

“Controls'' are internal procedures that Klappir has defined in its system description. Think of these as a set of rules that, if consistently followed, promote data accuracy, integrity and completeness. Klappir has defined over 30 such controls, and they span every aspect of the data lifecycle within Klappir’s effective control. Klappir’s controls span topics ranging from Software Development and IT security to sourcing of emission and conversion factors and work on sustainability statements. They all work together toward a common goal that is data accuracy, integrity and completeness. In addition, Klappir has defined certain controls that users should follow in order for Klappir’s controls to have their desired effect.

What is the ISAE-3000 (revised) standard?

ISAE-3000 (revised) is an assurance standard by the International Auditing and Assurance Standards Board (IAASB) that deals with assurance engagements other than audits or reviews of historical financial information.

Third party assurance providers can apply the ISAE-3000 (revised) standard to review and attest controls such as those that Klappir has designed are in in place, which is referred to as type-1 attestation, and whether they were in effect during a certain period of time, like a financial year, called a type-2 attestation.

Why is this important?

We increasingly see our users wanting or needing third party assurance of their sustainability reports. This can be a time-consuming process, charged at an hourly rate by the assurance provider. By providing third-party attestation of its system description controls, Klappir is looking to save its users time and ultimately money, as the user’s assurance provider can focus on other things than those that have already been attested.

Klappir’s ISAE-3000 (revised) system description is available to Premium and Sustainability Statement subscribers upon request.

By Klappir12 March 2024