What requirements should I implement when engaging a SAS 70 audit firm?
Selecting a SAS 70 audit firm is not a common event for most service organizations. The absence of clear expectations can lead to confusion among bidding firms and dissatisfaction with the selected audit firm. BrightLine understands the pitfalls inherent to this process and recommends that service organizations implement the following standards for any audit firm that is invited to propose its services: • The audit firm should have prior experience in the areas of SAS 70 auditing, which may be demonstrated by its volume of SAS 70 audit clientele and percentage of revenue derived from providing SAS 70 audit services. Technically, any properly licensed CPA firm can perform a SAS 70 audit; however, as with all professional services, service organizations may find that their level of satisfaction with the SAS 70 audit process is correlated with the level of expertise and experience of their selected audit firm. • The audit firm should have the in-house skill set to perform the audit. Outso
