SAS 70 consulting

Recent years have seen the steady growth of outsourcing for many essential business activities, from payroll and accounting services to information technology, customer care, human resources, and application hosting services. This trend will surely continue, as companies look for ways to trim costs and gain efficiencies.

SAS 70 provides guidance to enable an independent auditor to issue an opinion on a user organization’s controls. Because a SAS 70 audit is not a “checklist” audit of a pre-determined set of control objectives or control activities, your choice of a service auditor is critical. Auditors are required to follow the AICPA’s standards for fieldwork, quality control, and reporting and require specialized skills in accounting, auditing, and information security.

understanding risk management strategy

For over 30 years, Caturano and Company has been one of the most trusted names in accounting, technology consulting, and business advisory services. With deep expertise in information systems and internal controls, we understand the importance of a SAS 70 audit in your risk management strategy. 

SAS 70 (PDF)
SAS 70 FAQ (PDF)
SAS 70 Attestation