Assurance Services

Note:  Effective June 15, 2011, all reports on controls at service organizations must be performed in accordance with SSAE 16 and/or ISAE 3402, at which point, the current SAS 70 audit reporting standard will no longer be utilized. 

As a licensed CPA firm registered with the Public Company Accounting Oversight Board (PCAOB), SAS 70 Solutions offers the following assurance services:

SAS 70 / SSAE 16 / ISAE 3402 Readiness Assessments

SAS 70 / SSAE 16 / ISAE 3402 Readiness Assessments are designed to assist service organizations in assessing their preparedness for a Type 2 service audit.

Type 1 SAS 70 Audits

Type 1 SAS 70 audits provide independent third party verification by a licensed CPA firm as to whether control activities described by a service organization are suitably designed to meet specified control objectives and whether the controls were placed in operation as of a particular date.

Type 2 SAS 70 Audits

Type 2 SAS 70 audits provide independent third party verification by a licensed CPA firm as to whether control activities described by a service organization are suitably designed to meet specified control objectives and were in place and operating effectively over a period of time, which is typically six to twelve months in duration.

Type 1 SSAE 16 Assessments

Type 1 SSAE 16 assessments provide independent third party verification by a licensed CPA firm as to whether control activities described by a service organization are suitably designed to meet specified control objectives and whether the controls were placed in operation as of a particular date.

Type 2 SSAE 16 Assessments

Type 2 SSAE 16 assessment provide independent third party verification by a licensed CPA firm as to whether control activities described by a service organization are suitably designed to meet specified control objectives and were in place and operating effectively over a period of time, which is typically six to twelve months in duration.

SysTrust and WebTrust

SAS 70 Solutions provides services in accordance with the AICPA/CA Trust Services, including WebTrust® and SysTrust® which are a set of professional assurance and advisory services based principles and criteria set by the AICPA to address the risks and opportunities of IT.

Agreed-Upon Procedures

In the case where a SAS 70 audit does not exactly meet the reporting requirements of the regulators or end-user communities, SAS 70 Solutions can perform a custom audit or assessment, referred to as Agreed-Upon-Procedures with report in alignment with the expectations of the relevant end-users.