From SAS 70 to SSAE 16 (Part I): What does it mean?