An analysis on attestation-based authentication is also reported in [50].
It wasn't the candidates' one-on-one interviews that earned Carey's recommendation but the attestations of 14 of their colleagues.
Statement on Standards for Attestation Engagements No. 16.
The standard was superseded by SSAE16 (www.ssae16.com), which stands for Statement on Standards for Attestation Engagements No. 16.
Examples include: the ISO/IEC 27000 series, which are international information security management standards [29]; "Statement on Standards for Attestation Engagements No. 16" (SSAE 16) [30], which is an attestation standard for service organizations, put forth by the Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants AICPAAmerican Institute of Certified Public Accountants AICPA
Researchers should ensure that CSPs have been independently audited against comprehensive and internationally recognized and respected information security standards, such as those promulgated by the International Organization for Standardization ISOO) and Statement on Standards for Attestation Engagements (SSAE).
Recommendations Researchers should ensure that CSPs have been independently audited against comprehensive and internationally recognized and respected information security standards, such as those promulgated by the International Organization for Standardization ISOO) and Statement on Standards for Attestation Engagements (SSAE).
Identify and implement key tools and technology (e.g., dashboards) that create audit trails and allow supervisors to point to evidence of controls in action, rather than relying on an attestation.
William Drew said that, starting this year, the 50 Best has required voters to click on an attestation — "Can you guarantee that you've been to this restaurant in the past eighteen months?" — and to specify the date of their visit, but, as a fraud-busting measure, this seems only slightly more effective than exacting a birthdate from visitors to liquor Web sites.
Based on TC attestation techniques, the status of the platform is reported to the system operator.
