SAS 70 audits have become a mainstay in today’s regulatory compliance arena. As such, pricing for these audits have moved away from the more traditional hourly based fees that CPA’s of old used to charge to a new model. This new model, a “fixed fee”, essentially bundles all the costs of the audit into one price. Additionally, many of these fixed fees include out of pocket and travel related expenses, such as airfare, hotel, food, and any other misc. costs. In all honesty, its a good thing, after all, this is how we price our engagements. If you want a fixed-fee, then contact us for a cost-effective, quality SAS 70 Type I or SAS 70 Type II audit.
Want to learn more about SAS 70 audits? Need unbiased information on pricing, audit scope and how to truly become SAS 70 compliant in a cost-effective and timely manner? Then visit the most comprehensive web site developed for the SAS 70 auditing standard: www.sas70.us.com
So, what will you find on www.sas70.us.com? A host of items and helpful information, such as a glossary, a white paper section, along with a list of twenty of the most frequently asked questions on the SAS 70 auditing standard.
SAS 70 Audit and Compliance is a growing trend in today’s business arena. Many companies that fall under the auspice of a “service organization” are being required to be SAS 70 Type I and/or Type II compliant. Now is a good time to understand the “who, what, where, and why” of SAS 70 compliance and how it affects your organization in your overall SAS 70 needs.
Understand that SAS 70 is actually an auditing standard put forth in 1992 by the American Institute of Certified Public Accountants, simply known as the AICPA. The SAS 70 auditing standard has garnered much attention since the passing of the Sarbanes Oxly (SOX) Act of 2002. Here are some questions to keep in mind if your organization has to be SAS 70 compliant:
1. What is the scope of the audit? Is it a general controls audit or are their provisions/mandates/requirements to include specific business processes in the audit.
2. Where will the fieldwork take place and how many other locations fall under the scope of the audit?
3. How are the control objectives for the audit going to be developed? Do we have the expertise or can the external CPA firm assist in this area?
4. If a Type II SAS 70 is being performed, what is the “test period”?
To learn more about SAS 70 audits and to receive a sample SAS 70 Type II audit report in pdf format, visit the official SAS 70 Resource Guide.