The relationship between: ISAE 3402 and ISA 402

The ISAE 3402 standard states that reports made in accordance with ISAE 3402 already provide sufficient evidence under ISA 402, audit considerations relating to an entity using a service organization. In other words, ISA 402 focuses on the responsibility of the user organization to obtain adequate and appropriate control information when a user organization uses one or more service organizations. It is important to note that many financial reporting standards, as well as a number of supporting standards, also play a role in interpreting, understanding, and facilitating that standard itself, as is the case with the ISAE 3402 standard.