SAS70 Service facilitates SAS 70 audits to help our clients:
- Demystify SAS 70 requirements and prepare for the audit process
- Streamline security and compliance remediation activity in alignment with business objectives
- Demonstrate commitment to security and process maturity
- Proactively address vendor due diligence requirements for prospective and current customers
- Potentially eliminate the need for a financial audit of internal controls
Readiness Review Engagement
SAS70 Service Readiness Review Engagement can be conducted as part of the SAS 70 Type I or Type II audit, or separately. SAS70 Service does not require a Type I or II engagement to conduct a Readiness Review. This flexibility tends to be unique in the market of SAS 70 providers.
Remediation Service Engagement
SAS 70 Remediation Service Engagement can include assistance with control selection, risk assessment, as well as policy and procedure guidance, development assistance, and potentially training. Because remediation requirements vary greatly, all remediation activity is quoted separately.
Type I Service Engagement
SAS70 Service Type I Service Engagement includes Readiness Review, information gathering preparation, and CPA SAS 70 Type I audit of control design effectiveness. SAS 70 Type I audits are conducted by CPA firm and SAS70 Service Primary Partner, Goetsch & Associates, CPAs PLLC.
Type II Service Engagement
SAS70 Service Type II Service Engagement includes Readiness Review, information gathering preparation, and CPA SAS 70 Type II audit of control design and operating effectiveness. SAS 70 Type II audits are conducted by CPA firm and SAS70 Service Primary Partner, Goetsch & Associates, CPAs PLLC. With a 3 or 5 year contract, SAS70 Service offers price protection and payment distribution for the term of the contract.