This site will continue to function and will continue to be updated with information as needed for helping organiztions staty abreast of the coming changes for SAS 70.

If you are looking for SAS 70 certification and need a quality, nationally recognized boutique CPA firm with years of experience in conducting Type I and Type II audits, then call NDB, LLP.  We have performed SAS 70 Type I and Type II audits in almost every conceivable industry, from manufacturing to Information Technology.

Additionally, NDB. LLP has a structured format for conducting SAS 70 audits, beginning with a SAS 70 Readiness Assessment phase, then moving forward with other critical areas of the audit.  All of our staff are seasoned veterans, with years I.T. and accounting knowledge.

NDB, LLP offers cost-effective, SAS 70 audits as we have performed these engagements on companies ranging from small start-ups to large, multi-national corporations around the world.

Need to speak with a SAS 70 auditor directly, please call Mr. Charles Denyer at 1-800-277-5415-extension 705.  Mr. Denyer is one of the firms most experienced SAS 70 auditors and will be more than happy to speak with you regarding SAS 70 certification.

To learn more about SAS 70 certification, visit the SAS 70 Resource Guide, the most in-depth website dedicated to Statement on Auditing Standards No. 70.

SAS 70 Type II audits are being performed on a wide variety of industries in today’s business arena, and as such, many organizations are scrambling to meet the time and expense commitments for these highly specialized audits. Not only can they be considered an expensive financial proposition, SAS 70 audits require significant internal resources for assisting the external CPA firm in conducting the actual audit.

So, where’s the good news, you might ask? Audits take time and they can be expensive, no question about it. However, the audit process itself can be extremely beneficial and productive, giving you valuable insight into your organization.

Consider this: a well-scoped SAS 70 audit covers a number of essential areas and divisions within your organization, such as the following:

· Executive Management

· Human Resources

· Change Management

· Logical Security

· Network Security

· Physical Security

· Environmental Security

· Computer Operations

· Business Continuity and Disaster Recovery Planning

· Various Business Process controls

Thus, the value of the audit comes not from being compliant at the end of the process, but from the recommendations and subsequent activities that your organization has implemented to strengthen its underlying control environment.

Please keep in mind that auditors commonly give recommendations, such as a list of remediation activities to be undertaken after a SAS 70 Readiness Assessment has been performed along with “Management Comments” after the audit. These “pre-audit” remediation activities and “post audit” comments help ensure the service organization is adequately addressing all significant issues in a timely and proactive manner. Many of these issues tend to focus on areas such as the development of policies and procedures or the formalization of many areas within your daily operational environment, just to name a few.

In short, the value proposition from a SAS 70 Type II audit can be quite large indeed, so long as your organization truly embraces the audit for its true merit and worth.

To learn more about SAS 70 Audits, visit the official SAS 70 Resource Guide.

Our proven methodology has been tried and tested over the years, starting with a SAS 70 Readiness Assessment, which helps define the scope of the audit along with obtaining a greater understanding of your organization’s control framework and overall structure.

To learn more about SAS 70 audits, visit the official SAS 70 Resource Guide, the most comprehensive site on the Internet dedicated solely to Statement on Auditing Standards No. 70. And if you need a cost-effective, quality audit conducted in the state of California, the please contact NDB, LLP.

Any good quality and reputable CPA firm will be able to provide your organization with a SAS 70 Readiness Assessment. Generally, speaking, this should consist of a series of questionnaires that cover various areas of the audit that will be subsequently examined and tested for compliance.

When done correctly, a SAS 70 Readiness Assessment helps “unearth” any deficiencies, gaps or weaknesses within your overall control framework that could hinder the audit process. It also helps define the scope of the audit along with giving your organization a first-hand working knowledge of the auditor’s skill sets and how they function.

Here you’ll find information on a broad range of topics in regards to Statement on Auditing Standards No. 70, such as the following:

• Technical descriptions of Type I and Type II audits
• Audit scoping factors
• Pricing and cost considerations for SAS 70 audits
• White papers on industries and sectors affected by the SAS 70 auditing standard.
• 20 of the most frequently asked questions (FAQ) on Statement on Auditing Standards No. 70.
• Discussions on the relationship between SAS 70 Type II audits and the Sarbanes Oxley (SOX) Act of 2002.
• And much, much more.

• How to properly scope a SAS 70 audit
• Pricing and cost factors for these audits
• Understanding the benefits of a Readiness Assessment and what the process is for undergoing this activity.
• How to properly plan a SAS 70 roadmap for compliance
• How the auditing standard has changed over the years to conform with the growing changes in today’s business environment.
• You can even request to obtain a Sample SAS 70 Type II audit report, which will give you an excellent example of the “finished product” you would receive from the CPA firm conducting the audit.

If you need additional information or have general questions, call me direct at 214-298-8532 and i will be happy to answer any of your questions regarding SAS 70 Type I and Type II audits.

Even with that said, there are a number of baseline costs that would be included in any SAS 70 audit, such as costs for testing control objectives (if a SAS 70 Type II), costs for travel, etc.  But again, you have to look  at the scope of the audit and how in-depth is the overall audit process. Is it a General Controls SAS 70? Does it include specific tests for business processes within your organization? How many physical locations will fall under the scope of the audit?

There are good questions to begin asking. If you want to learn more, then call me direct at 214-298-8532.

Charles Denyer, SAS 70 Auditor