A new AICPA publication, Effects of a Third-Party Service Provider in a WebTrust or Similar Engagement—Version 3.0, supplies nonauthoritative advice to practitioners performing examinations intended to provide assurance to WebTrust clients and their auditors about controls on third-party service providers. The book explains how to evaluate the quality of offerings from Internet service providers or Web site hosts, such as performing essential data processing activities and administering Web site security. Practitioners can obtain the guide at no charge on the AICPA Web site at www.aicpa.org/webtrust/index.htm .
Meanwhile, TradeCard Inc., a provider of online communication services, received the first WebTrust Confidentiality Seal granted in the United States. During a recent WebTrust engagement, Ernst & Young LLP auditors evaluated TradeCard’s online privacy policies and controls and confirmed the company adequately safeguarded all confidential information collected and stored on its Web site.