What are the differences between the Type I and Type II Service Auditor’s Reports?
The important distinction between the two types of SAS 70 reports is the level of testing, and therefore, the level of assurance the SAS 70 report provides. The auditor’s report is directed at the description of controls provided by the service organization. In a Type I report, the auditor’s opinion states that the description is reasonably accurate, the controls described are suitably designed to achieve specified control objectives, and the controls have been implemented as of a specified date. This opinion is therefore a “point in time” opinion. The Type II report offers more assurance because, in addition to stating that the description is reasonably accurate, the controls described are suitably designed to achieve specified control objectives, and the controls have been implemented, the auditor’s opinion also states that the controls described operated effectively over a specified period of time. The time period specified is typically six months to a year. Obviously, the marketpla
Related Questions
- What type of approval does a lender need to originate and/or underwrite and/or service Title II Single Family Loans, including HECMs (Reverse Mortgages) or 203k (Rehabilitation mortgages)?
- What type of reports can libraries expect to receive as part of the standard service?
- What are the differences between type I and type II diabetes?
