This is a specific examination conducted by a CPA firm in accordance with AICPA standards.

• Type I: Validates that the organization’s controls are designed and in place as of a specific date.
• Type II: The “gold standard.” It proves the controls operated effectively over a period of time (usually 6–12 months).