International Standard for Assurance Engagements 3000 (ISAE 3000)

This is the International Audit Standard on Assurance Engagements other than Audits or Reviews of Historical Financial Information.

 ISAE 3000 is generally applied for audits of internal control, sustainability and compliance with laws and regulations.

ISAE 3000 recognizes two types of reports:

• a type 1 and
• a type 2 report.

• A type 1 report provides assurance on the suitability of design and existence of controls and
• a type 2 report provides assurance on suitability of design, existence and operational effectiveness.

The contents of the ISAE 3000 report typically consists of:

• a description of the scope;
• the norms against which the report is tested;
• a description of the control framework;
• a detailed description of the risk management system; and a control matrix consisting of the risks, the related control objectives and the related controls.