Everything you need to know about SSAE 18.
The Statement on Standards for Attestation Engagements 18, SSAE 18, is a set of guidelines that establish requirements for practitioners’ reports, including Service Organization Controls (SOC) attestations.
SSAE 18 is only the name of the standard, not a certification. Be cautious of anyone who says they’re “SSAE 18 certified”. This standard will allow you to perform an informed review of the fourth party’s SOC 1 or 2 report. However, the scope of your vendor’s audit won’t include the operating effectiveness of the controls at your vendor’s subservice organization.