How often does my organization need to have a SAS 70 audit performed?
Type 1 SAS 70 audits are typically performed once during a calendar year. Although not prohibited, it would be highly unusual for a service organization to request two identical Type 1 SAS 70 audits during a calendar year since there would be minimal value added from the second audit to the service organization or its user organizations. The vast majority of service organizations schedule their Type 2 SAS 70 audits to be performed once during any given 12 month period. Following the initial audit, subsequent audits are generally scheduled at the same time during the following years. Some service organizations have specific reasons for requiring semi-annual or quarterly Type 2 SAS 70 audits, but these instances are not the norm. Many service organizations elect to have a Type 1 audit performed as preparation for a Type 2 audit. In these cases, it is common for the Type 2 audit to be scheduled within 12 months of the completion of Type 1 audit. Type 1 and Type 2 SAS 70 audits can be comp
