Which of the following is not true about the SSAE16 report?
a. It is a third-party attestation report.
b. It replaced Statement on Auditing Standards No. 70 (SAS 70).
c. When using the carve-out method, service provider management would exclude the subservice organization’s relevant controls.
d. The service provider prepares a separate SSAE 16 report tailored to the needs of each of its client firms, which the client auditors rely upon.
e. All of the above are true.