SAS 70 Audits

In today's competitive marketplace, third-party service organizations are now expected to have adequate controls and safeguards when they host, process or account for their customers' data and assets. As a result, SAS 70 service auditor’s reports are being used for a multitude of purposes, including:

as market differentiators to provide assurance that they are adequately satisfying their clients’ business control objectives
as a benchmark from which they can monitor the ongoing acceptability of their controls and risk management and internal audit activities
as tools for companies going public to capture valuable due diligence information

EKS&H's risk advisory professionals guide clients through the SAS 70 process, offering Type 1 and Type 2 service auditor’s reports, as well as SAS 70 readiness assessments designed to prepare clients for the more in-depth SAS 70 audit. This assessment offers procedures, controls and documentation services and deliverables.

EKS&H adds value to every SAS 70 audit by offering:

a risk-based approach to control evaluation by testing only relevant, key controls
a team with the extensive IT experience necessary to address IT application controls simultaneously with manual application controls, resulting in the most effective and efficient audit
access to our locally-based staff of internal control specialists with 10 to 15 years of process evaluation and external and internal audit experience as well as the CIA, CPA, CFE and CMA designations
access to our locally-based staff of industry experts including all of the major industries