Who Should Consider a Type 2 SAS 70 Audit?
The following are characteristics of the typical Type 2 SAS 70 audit candidate: • The service organization provides a service that has a direct and/or significant impact on the financial reporting controls of its customers. • The service organization is contractually obligated to provide a Type 2 report to its customers. • The service organization does not have an internal audit department and desires to use the SAS 70 audit, in part, as a quasi-internal audit of its operational and IT controls. • The service organization provides significant services to publicly traded companies that fall within the purview of these customers’ Sarbanes-Oxley (SOX) compliance efforts. Please visit our FAQs page to learn more about SAS 70 audit topics.
