| Welcome to today's regulatory environment, where | | | | engagement. This is important because it dictates SAS |
| SAS 70 Type I & Type II audits have permeated | | | | 70 pricing and it also brings into play what really needs |
| the landscape like never before. Ever since the | | | | to be covered in the audit. |
| Sarbanes Oxley (SOX) Act of 2002, SAS 70 audits | | | | Pricing |
| have been on the upswing, and in a big way. Sure, | | | | Be sure to get a fee that is fixed. Thus, all audit costs, |
| they were used before when the SAS 70 auditing | | | | including travel and out of pocket expenses are part |
| standard was introduced in 1992, but certain provisions | | | | of the engagement. This is imperative because out of |
| with the SOX act, most notably, section 404, have | | | | pocket, travel and other miscellaneous expenses can |
| pushed these audits into the limelight. | | | | be very, very costly to the audit. |
| If you are a service organization seeking to become | | | | SAS 70 Readiness Questionnaire & |
| SAS 70 Type I or Type II compliant, then there's alot to | | | | Assessments |
| learn about this highly specialized auditing standard. | | | | If this is the first time your organization is undertaking a |
| Once you gain a strong understanding about many of | | | | SAS 70 Type I or Type II audit, then its imperative that |
| the core elements of a SAS 70 audit, you will be able | | | | you start on the right track-SAS 70 readiness |
| to make a wise, informed decision on moving forward | | | | questionnaire assessments are what you need. They |
| with the audit and with the right provider for conducting | | | | help lay the groundwork for a successful SAS 70 |
| the audit. | | | | audit while also proving invaluable for learning about |
| Important Points about SAS 70 audits | | | | any shortcomings or deficiencies in your internal |
| Scope | | | | controls. |
| You will need to find out early on what the scope of | | | | You can learn more about SAS 70 audits through |
| the SAS 70 audit is going to be. That is, will the audit | | | | publications from the AICPA. Additionally, you can visit |
| be a straightforward general controls report, or will it | | | | the official SAS 70 Resource Guide. |
| include certain business processes as part of the | | | | |