What industry standards does GCS use when conducting a SAS 70 audit?
SAS 70 auditing procedures utilize a combination of standards derived primarily from institutions having extensive experience in analyzing and developing critical general and applications controls. Many of these standards are recognized as globally accepted best practices approaches, and have been adopted by accountants and consultants worldwide. Listed below is a brief description of the standards used when conducting a SAS 70 audit. COBIT First released in 1996 and known as the “Control Objectives for Information and Related Technology”, COBIT is an internationally accepted standard for Information Technology security and control practices. It is now in its third edition. Published by the IT Governance Institute, COBIT is fast becoming one of the key standards used by corporations around the globe who need a well-defined set of policies regarding internal control over information and related IT systems. COBIT is compliant with other standards, such as COSO and ISO 17799, and contains
