SAS 70 Audits and What You Need to Know about Pricing, Scope and other Items
| posted by charles denyerThe SAS 70 auditing Standard, put forth in 1992, has become such an important element in today's ever-growing compliance world. From Sarbanes Oxley, to HIPAA and Gramm Leach Bliley, the auditing standard has exploded onto the scene within the last 3 to 4 years. Oh sure, its been around for sixteen (16) years, but it's prominence has only been noted as of recently. What's more, there has been a fair amount of criticism of the auditing standard based on the looseness of its guidelines, and how one report can look completely different from another. Additionally, prices for Type I and Type II audits have a very wide range, also causing frustration for service organizations who have to undergo an audit of this magnitude.
Don't despair as it's important to note that pricing for SAS 70 audits is based upon a number of pricing factors that are important to consider when picking a vendor to do your audit for you.
Additionally, scope is important also, as many service organizations are typically unaware of exactly what a sas 70 audit covers, but this should be greatly mitigated or eliminated with a proper SAS 70 Roadmap for compliance.
There also a number of benefits and important considerations that interest parties should read concerning SAS 70 Type I and Type II audits. This information can be invaluable when making a decision or starting the due diligence on a CPA firm to conduct the audit.
