CORAA

Service Organisation Report Review: CUEC Mapping (Word)

Map the controls a service organisation expects of the client to what the client does.

Free · CORAA original — SA-aligned
Updated 17 Oct 2026
Maps
CUEC to client control
Also
Report exceptions
Pairs with
Reliance worksheet
Format
Editable Word
Share this template
Your firm — letterhead
Appears at the top of the document as the audit firm letterhead.
Used as the letterhead block.
Engagement details
The client and period this document is for.
What’s inside

An excerpt from the template.

Service Organisation Report Review: Complementary User Entity Controls Mapping — ___

Scope / period: ___ | Prepared by: ___ | Reviewed by: ___ | Date: ___

When the client relies on a service organisation's controls report, record here the controls the report expects the client to run, and how the client does so. Use alongside the reliance worksheet. Check the current reporting standard and the terms of the report received.

Report details

↑ Excerpt only — the full template is what you download as Word
About this template

What you’re downloading, and when to use it.

This template follows the format published by the Institute of Chartered Accountants of India (ICAI) in the AASB Audit Working Paper Templates (June 2023), the authoritative reference for Indian statutory-audit documentation. Fill in your firm’s letterhead and the engagement details on the form above, click Download Word file, and you’ll get a fully formatted .docx ready to use.

Everything is generated in your browser and on a stateless API endpoint — no account, nothing stored on our servers. We’ll ask for a work email once before your first download so we can send you the file and the occasional relevant update; after that, downloads on this device are instant. Edit freely in Word, Google Docs or Pages before sending to your client.

Common questions

FAQs.

What are complementary user entity controls?
They are controls the service organisation's report assumes the client runs. If the client does not run them, the report's assurance may not reach the client's data.
Related templates

You might also need.

Service Organisation Reliance Worksheet
Generate a service organisation reliance worksheet for SOC 1 or ISAE 3402 reports: period, scope, exceptions a
Third-Party / Outsourcing Risk Audit Checklist
Free third-party and outsourcing risk internal audit checklist. Vendor risk tiering, SLA monitoring, sub-outso
IPE Testing Worksheet — Information Produced by the Entity
Generate an IPE testing worksheet to test completeness and accuracy of reports used in controls, with logic, p