What was the scope of the SAS 70 audit in i-flex?
The SAS 70 review in i-flex Solutions was carried out by Ernst & Young (India and the US). The basic purpose of the audit was to independently assess the adequacy controls in i-flex s software development, maintenance and support processes. The functional scope of the review also covered areas like training, legal department, human resources, infrastructure facilities and customer confidentiality. SAS 70 permits the company to chalk out the scope of the audit so we decided to focus exclusively on our core areas. This review was covered in our development centres in Bangalore, Chennai, Mumbai and Pune. In the subsequent review scheduled for the same time next year, we plan to expand the scope of the audit. I-flex is an SEI CMM Level 5 certified company. What is the basic difference between SAS 70 certification and SEI CMM certification? The SAS 70 is a standard developed by the American Institute of Certified Public Accountants (AICPA). It is generally applicable when an auditor is audi
