SAS 70 – What is it?

The Statement of Auditing Standard No. 70 (SAS 70), soon to be replaced by Statement on Standards for Attestation Engagements (SSAE) No. 16, is a standard by which an auditor can issue an audit report about your transaction processing controls. In short, a SAS 70 audit is an opinion on controls at an entity that provides services to others. Public companies and others need to understand the internal controls of their outsourced service providers, so your customers and their auditors are the intended audience. The SAS 70 report is the most common way for you as a service provider to communicate details about your internal controls.

Frequently Asked Questions

Benefits of SAS 70 Audits

AICPA's Audit Guide

There are two types of SAS 70 Audits.

• Type I addresses and evaluates controls and procedures at a point in time; it is normally the first engagement that organizations consider.
• Type II addresses and evaluates controls and procedures over at least six months.

SAS 70 audits and related services have been a part of PKM’s practice since 1997. The firm’s Systems Assurance Services group audits organizations throughout North America.

Did you find what you were looking for? If not, please email tammons@pkm.com or call 404-420-5679 and let us assist you. Or you can send us a message with your information request.

Back to PKM SAS 70 Resource Center.