We bring in “an independent perspective” to the outsourcing engagements – while providing an objective assessment and recommendations of vendor operations back to the client - to promote a risk based audit approach.

We also understand that not every one of your key vendors can provide you with a SSAE 16 (SOC 1, SOC 2, SOC 3) report which other wise would satisfy your auditors. In the absence of a SSAE 16 (SOC 1, SOC 2, SOC 3) from the vendor – PAG can conduct an independent audit of the vendor operations and provide you with a report that can satisfy your management /audit /client objectives.

Given our knowledge of the US regulations and audit obligations, our routine and ad-hoc audits along with reports and recommendations are tailored to benefit the client organizations’ SOX and SSAE 16 (SOC 1, SOC 2, SOC 3) reporting structures.

In addition they also serve to the benefit of client organization’s Board of Directors and Audit Committees, Vendor Management Executives and CIO/CISO offices.

Our services enable our clients in the following areas :

	Conduct pre-defined – Due-Diligence reviews / Audits on the vendors
	Extend Client’s Internal Audit / Security activities to off-shore vendors
	Monitor and report non compliance with client’s MSA / SLA agreements
	Evaluate Vendor’s BCP / DR readiness / periodic testing / review of BCP test results
	Establish and conduct periodic vendor audit reviews and prepare audit reports to client specifications

SO ... If you are currently outsourcing / planning to outsource your IT / Business Process to outsourcing vendors in  India, Philippines and East Europe, then give us a call /send as an email – to learn how PAG can add value to your outsourcing relationships.