What Is a SAS 70 Type II Design?
SAS 70 is an international auditing standard developed by the American Institute of Certified Public Accountants (AICPA). This standard is defined in the Statement on Auditing Standards (SAS) No. 70 ("Service Organizations").
Unlike some other internal control review standards, SAS 70 provides a firm and its auditor with the assurance that a service organization (typically an outsourcing firm or any other subcontractor) properly conceives, implements, and discloses its internal control. A SAS 70 Type II Design supports your organization in describing a set of internal controls for future SAS 70 Audits. The goal is to ensure IT security is aligned with business requirements.
Why Perform a SAS 70 Type II Design?
Due to increased scrutiny of company financial statements, your clients may request a report in order to confirm that the operating effectiveness of your company’s internal controls meets their requirements.
Additionally, your company should consider how efficient and adequate controls and procedures are documented and if additional information for financial statement audits or other requests can easily be provided. A SAS 70 report helps you demonstrate your commitment to safeguarding sensitive data and maintaining a high level of quality and accountability.
How Can SecureState Help?
Our SAS 70 Type II Design Assistance service is structured to help IT functions select the best approach to IT control reporting and management - preventing duplicity and omission of controls that may exist with other IT control frameworks within the IT organization. This structure not only creates efficiencies within your audit and control operations programs, but helps deliver a meaningful SAS 70 service to your organization.
Contact the SAS 70 Type II Design experts at SecureState today.