SSAE 18 - Attestation Standards (SOC Reporting) 205.25: AT-C 205.25 Further Procedures

What does 205.25 require?

Tests of controls are designed and performed to obtain sufficient appropriate evidence of operating effectiveness where the practitioner intends to rely on controls, where other procedures alone cannot give sufficient appropriate evidence, or where the subject matter is internal control.