What should a service organization look for in a service auditor?
Any CPA firm can offer SAS 70 audit services; however, service organizations should seek out firms with SAS 70 experience and the staff to provide the services. Service organizations should be thoughtful in choosing a CPA firm for SAS 70 services. Look for personnel with a combination of accounting, auditing, and information security credentials including Microsoft Certified Professional (MCP), Citrix Certified Administrator (CCA), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), and CPA.
Related Questions
- Will the fact that many of the Service Providers are overseas increase the risk that HMRC will look to employment businesses, as the parties with greater assets, to transfer debts?
- Who can perform a SAS 70 audit? What should the service organization look for?
- Can service be performed at a for-profit organization or company?
