Who can perform a SAS 70 audit? What should the service organization look for?
A SAS 70 audit can only be performed by an independent certified public accountant (CPA) or firm. CPA firms that perform SAS 70 audits must adhere to specific professional standards established by the American Institute of Certified Public Accountants (AICPA). Licensed public accounting firms are required to follow specific guidance related to planning, execution, and supervision of the audit procedures and the reporting of the results of the audit. In addition, public accounting firms are required to undergo a peer review to ensure that their firm’s audits are conducted in accordance with the applicable professional standards. Specific practicing requirements may vary depending on the requirements of the applicable State Board and/or other governing bodies.
