CORAA

Service Organisation Reliance Worksheet (Word)

Decide how far to rely on a provider's assurance report, including gap period and user entity controls.

Free · CORAA original — SA-aligned
Updated 17 Oct 2026
Reviews
Provider assurance report
Checks
Period and exceptions
Tracks
User entity controls
Format
Editable Word
Share this template
Your firm — letterhead
Appears at the top of the document as the audit firm letterhead.
Used as the letterhead block.
Engagement details
The client and period this document is for.
What’s inside

An excerpt from the template.

Service Organisation Reliance Worksheet — ___

Scope / period: ___ | Prepared by: ___ | Reviewed by: ___ | Date: ___

Decide how far the company can rely on a third-party service provider's controls, using the provider's assurance report (for example a SOC 1 or ISAE 3402 / SSAE 18 report). Check the current standard for the report type and use.

Complementary user entity controls

↑ Excerpt only — the full template is what you download as Word
About this template

What you’re downloading, and when to use it.

This template follows the format published by the Institute of Chartered Accountants of India (ICAI) in the AASB Audit Working Paper Templates (June 2023), the authoritative reference for Indian statutory-audit documentation. Fill in your firm’s letterhead and the engagement details on the form above, click Download Word file, and you’ll get a fully formatted .docx ready to use.

Everything is generated in your browser and on a stateless API endpoint — no account, nothing stored on our servers. We’ll ask for a work email once before your first download so we can send you the file and the occasional relevant update; after that, downloads on this device are instant. Edit freely in Word, Google Docs or Pages before sending to your client.

Common questions

FAQs.

What are complementary user entity controls?
Controls the provider assumes the customer operates. If the customer does not operate them, the provider's controls may not give the assurance expected.
Related templates

You might also need.

Third-Party / Outsourcing Risk Audit Checklist
Free third-party and outsourcing risk internal audit checklist. Vendor risk tiering, SLA monitoring, sub-outso
SOX Control Test Workpaper — Design and Operating Effectiveness
Generate a SOX control test workpaper covering walkthrough, design effectiveness, operating effectiveness samp
ICFR Testing Working Paper — Sec 143(3)(i) Format
Free ICFR testing working paper for Sec 143(3)(i) — risk-control matrix (RCM), ITGC tests, deficiency vs signi