SAS 70 Services
In today’s global economy, service organisations or providers must demonstrate that they have adequate controls and safeguards when they host or process data belonging to their customers. A Statement on Auditing Standards No. 70 (SAS 70) report – Type I or Type II – provides a uniform reporting format for service organisations to disclose their control activities and processes to their customers.
Grant Thornton’s SAS 70 services can provide independent, objective reports on the design, implementation and operating effectiveness of controls for your service organisation. A typical SAS 70 report created by a Grant Thornton team of experienced professionals will contain:
- An evaluation on the design, implementation and effectiveness of controls for a specific audit period;
- A description of the control environment, its control objectives and the key controls that are in place to achieve those control objectives; and
- Tests of operating effectiveness and the results of those tests.
In addition to the report, a SAS 70 review can offer several other benefits to your company, including:
- The ability to assess readiness to undergo a SAS 70 review prior to the formal process;
- Assurance that adequate internal controls and safeguards exist over customer information and related business processes;
- Demonstrating to customers a commitment to sound internal controls;
- Mitigating the strain on internal resources by eliminating multiple visits from user auditors; and
- Identifying opportunities for improvement in many operational areas.
Contact
Cian Blackwell
Partner, Head of Business Risk Services
D +353 (0)1 6805 710
Tony Thornbury
Partner, Audit & Assurance Services
T +353 (0)1 6805 805