SAS 70 Assurance Services
Provided below are important facts, details and essential information for anyone seeking to purchase a Statement on Auditing Standards No. 70 (SAS 70). You can now gain a greater understanding of many key components regarding SAS 70 audits by browsing any number of helpful topics.
Table of Contents
Readiness Assessments
Many service organizations are unsure of the necessary steps that must be in place before effectively beginning the audit process for compliance, which is essentially considered one of the first steps in the SAS 70 Roadmap for Compliance...
[ Readiness Assessments ]SAS 70 Type I Audit
A Type I report is only issued for a particular date. For example, a certified public accounting firm would examine a company's controls and report on the "controls placed in operation" for a specified point in time, such as June 1, 2008. A fair amount of criticism of SAS 70 Type I audits has centered around it's limited testing period...
[ SAS 70 Type I Audit ]SAS 70 Type II Audit
A Type II report is issued after a generally accepted period has been completed. For example, an accounting firm would examine a company's controls from June 1, 2007 to November 30, 2007 and report on the "controls placed in operations and tests of operating effectiveness" for the six-month test period of the audit.
[ SAS 70 Type II Audit ]