What types of companies should undergo SAS-70 audits?
SAS-70 audits are beneficial to any service organization which provides outsourced services to another organization. These audits are especially important to service organizations whos offerings are considered mission critical. It is often the case when a user organization is being evaluated or undergoing its own internal audits, the user auditor will require the service organization to turn in a SAS-70 report generated by the service organization’s auditor. Why does Net Access Corp. (NAC) undergo a SAS-70 Type II audit? The Senior Management of Net Access Corporation chose to perform an annual SAS-70 audit because it ensures that both the policies and procedures (controls) that the deparment managers have put in place, meet or exceed the generally accepted best practices of the industry, and that these controls are being tested on a regular basis. The audit process affords them an extremely detailed view into the day-to-day operations of the business, which helps them to identify and
