What is the difference between a Type 1 and a Type 2 SAS 70 audit?
Many of our clients start with a Type 1 audit in order to properly document their controls and business processes and to “get ready” for the more extensive Type 2. A Type 1 audit consists of inquiry and observation of transaction processing and controls for a single point in time – such as May 31, 2007. No testing of the controls are done. A Type 2 audit consists of of inquiry, observation, and testing of transaction processing and controls that were in place over a 6 month period. The Type 2 audit provides the control validation through testing that is most often sought after by clients and partners.
