How often must SAS 70 audit reports be issued?
The AICPA suggests the period of review, or time frame in which the report covers, to cover at least six (6) months. While the standard sets a minimum period of review, the period of review can be set to cover any period of time over 6 months i.e., six months, nine months or one year. It is recommended that a report be issued at least annually, allowing the user organizations and user organization auditors to assess the control risk for the financial statement assertions impacted by the services provided by your company.
