Frequently Asked Questions about SAS 70
Provided below are important facts, details and essential information for anyone seeking to learn more about Statement on Auditing Standards No. 70 (SAS 70). You can now gain a greater understanding of many key components regarding SAS 70 audits by browsing any number of helpful topics.
- Why are service organizations being asked to be compliant?
- What types of industries and service organizations are having to become compliant?
- What are the advantages of compliance?
- Where can I learn more about SAS 70 Audits?
- Where can I get a sample SAS 70 audit report?
- What important facts do I need to know about SAS 70?
- How can organizations better prepare for an SAS 70 Audit?
- Can you provide an SAS 70 overview for my organization?
- Where can I learn about doing a SAS 70 audit?
- How can I find value in the SAS 70 Audit process?
- How is SAS 70 relevant to Software as a Service (SaaS)?
- Where can I obtain SAS 70 resources?
- Can you provide me with a quick primer on SAS 70 Audits?
- What is the importance of SAS 70 Audits and a TPA?
- What is the relationship with SAS 70 and HIPAA?
- What is the relationship with SAS 70 and GLBA?
- What is the relationship with SAS 70 and SaaS?
- What is the best, unbiased resource for SAS 70 Audits?
- What about SAS 70 and business continuity?
- Where can I learn more about how to "scope" a SAS 70 Audit?
Impact of Audits to the Economy
Interestingly, the last decade has seen somewhat of a shift in auditing. That's not to say there has been a decrease in this specialized service, quite to the contrary. The shift has occurred as financial statement auditing has begun to see somewhat of a flat line in growth, while highly specialized audits, such as Statement on Auditing Standards No. 70 (SAS 70) have been given the limelight. Regulatory legislation, such as the Sarbanes-Oxley Act of 2002, the Health Insurance Portability and Accountability Act (HIPAA), the Gramm-Leach Bliley Act (GLBA), and numerous other federal and state laws have pushed audits, such as SAS 70, into the forefront.
[ More about impact of audits to the economy and SAS 70 ]Privacy Rule Within Gramm Leach
GLBA requires that a financial institutions privacy practices are clear, concise and detail specifically what information is collected, who it is shared with, and what safeguards are enacted for protecting "customers" and "consumers" information. GLBA allows for an "Opt Out Rights" provision, whereby customers and consumers can "opt out", ultimately not having their information given to and shared with external, third party entities.
[ More about Privacy Rule Within Gramm Leach and SAS 70 ]