Sas70 Pricing archives - Regulatory Compliance, Governance and Security

Regulatory Compliance, Governance and Security:

sas70 pricing

Dec 30 2008   2:37PM GMT

SAS 70 Audit Reports | Obtain a Sample SAS 70 Type II Audit



Posted by: Charles Denyer
SAS 70, What is SAS 70?, SAS 70 download, SAS 70 overview presentation, sas70, sas70 sample reports, sas 70 control objectives, sas 70 type ii, SAS 70 Type I, sas70 pricing, sas 70 sample report, sas 70 audit report

If you are seeking to learn more about SAS 70 Type I and SAS 70 Type II audits, then one of the most effective ways for truly gaining an understanding of the auditing standard is to see what the finished product looks like-that is, a final SAS 70 audit report. Many people voice great frustration when going through their first SAS 70 audit because they truly don’t know what the SAS 70 audit report “looks and feels” like, that is, what is the actual content, format, and layout of the report.

Having a sample SAS 70 audit report prior to commencement of the audit who greatly benefit service organizations as they can visually see the important components of what lies in the report itself. sas70.us.com provides sample SAS 70 Type II audit reports for organizations and individuals looking to learn more about Statement on Auditing Standards No. 70, commonly known as SAS 70.

This report will give you an in-depth layout of what a SAS 70 audit report is, what are the critical components and content that make up the report, and it will also allow you to gain a true conceptual understanding of what the audit is actually undertaken and performed by auditors.

Remember, knowledge is power, so the more you know and learn about SAS 70 audits, the more prepared you and your organization will be in undertaking a SAS 70 Type I or SAS 70 Type II audit.

Dec 30 2008   2:19PM GMT

SAS 70 Type II Audits | Become SAS 70 Compliant in a Cost Effective Manner



Posted by: Charles Denyer
Auditing, audits, SAS 70, SAS 70 readiness questionnaire, SAS 70 overview presentation, sas70, sas 70 type ii, SAS 70 Type I, sas70 pricing, sas70 readiness assessment questionnaires, sas 70 audit report

If your organization is seeking to become SAS 70 Type I or SAS 70 Type II compliant for 2009, then its time to roll up your sleeves and learn all you can about what a SAS 70 audit actually is along with many of its inner workings? And why? Knowledge is power. The more information you have about what a SAS 70 audit truly is, then the more informed you are about issues for the audit, such as scope, pricing, testing of controls, just to name a few. Think all SAS 70 audits are alike? Not quite. Does every CPA firm follow the same roadmap when conducting auditing and test procedures for SAS 70 audits? Hardly.

With that said, visit sas70.us.com and learn all you will ever need to know about Statement on Auditing Standards No. 70, simply known as SAS 70. You will be able to obtain critical information regarding SAS 70 audits, such as the history of the auditing standard, pricing considerations and factors to be taken into consideration for a SAS 70 audit, a SAS 70 roadmap for compliance checklist, just to name a few. It’s all part of being able to provide interested readers with a comprehensive guide to one of the most widely used and recognized audits in today’s business world.

So before you accept any proposals from any number of CPA firms that specialize in SAS 70 audits, take the time to educate yourself on the inner workings of what a SAS 70 audit actually is.

Today’s regulatory compliance mandates are here to say, and so are SAS 70 audits.


Nov 29 2008   5:30PM GMT

SAS 70 Type II Audits | An Auditor’s Expert Opinion on Pricing



Posted by: Charles Denyer
Compliance, SAS 70, SAS 70 readiness questionnaire, sas70, sas70 sample reports, sas 70 control objectives, sas 70 type ii, SAS 70 Type I, sas70 pricing, sas70 readiness assessment questionnaires, sas 70 audit report

People often ask me what the price of a SAS 70 Type I or SAS 70 Type II audit is. My response? That depends, I say, on many, many factors. Here is what needs to be understood when considering pricing factors for SAS 70 Type I and Type II audits:

1. The CPA firm-Are you looking for brand recognition or are you looking for a cost-effective provider which can simply help you “check the box” for SAS 70 compliance.

2. Scope-What is being examined and tested from a control perspective for SAS 70 audits? Are you looking for just a general controls audit or an audit that also includes specific business processes?

3. Testing period: For SAS 70 Type II audits, what is the testing period going to be? The longer the test period, the more the audit will cost as auditors have to pull larger samples, do more testing, etc.

4. Location of testing: How many physical areas does your organization have that will fall under the scope of the SAS 70 audit? Having more than one means that auditors will ultimately have to travel to numerous locations to conduct more testing. Again, more locations, more time, money, and expenses out of your pocket for the audit itself.

5. Are you confident you can obtain SAS 70 compliance without conducting a SAS 70 readiness assessment? If not and you need assistance identifying weaknesses and gaps within your control environment, then expect to spend more time, money, and resources on the front end of a SAS 70 audit for preparing in an adequate manner.

As you can see, there is no quick, easy, black and white answer to the cost of a SAS 70 Type I or Type II audit.

To learn more about statement of auditing standards no. 70, visit the official sas 70 resource guide, where you can obtain a wealth of information on sas 70 audits.


Nov 13 2008   2:40AM GMT

SAS 70 Audit Costs and Pricing | What You Need to Know



Posted by: Charles Denyer
SAS 70, sas70, sas 70 type ii, SAS 70 Type I, sas70 pricing, sas 70 audit report

If your organization is planning on undertaking a SAS 70 audit, be it a Type I or a Type II, then there are some important points you need to learn about SAS 70 audit pricing.

First and foremost, make sure to get a “fixed fee” for the SAS 70 engagement a fixed fee includes all out of pocket, travel, and other miscellaneous expenses that are incurred by the auditor for purposes of conducting the audit. More and more firms are moving to the fixed fee model, so take advantage of this type of pricing.

Second, scope greatly determines the price of the SAS 70 audit, so be sure to properly scope the audit. That means answering the who, what, when, where and why for the audit. Who needs the report and are there any specific requirements they are looking what. What is the audit test period. When will testing be done. Where will testing be done, such as what facilities will be part of the SAS 70 audit scope. These are all important points to cover when assessing scope for a SAS 70 Type I or SAS 70 Type II audit.

To learn more about SAS 70 audits, what is a SAS 70 and to obtain a wealth of information on the auditing standard itself, then visit the official SAS 70 Resource Guide.


Oct 27 2008   9:22PM GMT

SAS 70 Audits | Make Sure to Get a “Fixed Fee” for the Audit



Posted by: Charles Denyer
SAS 70, sas 70 type ii, SAS 70 Type I, sas 70 rfp, sas70 pricing, sas70 readiness assessment questionnaires, sas 70 sample report, sas 70 audit report

SAS 70 audits today are being conducted by CPA firms large and small, big and tall. Though they vary greatly in size, complexity and audit skills, what seems to be the industry standard is a “fixed fee” for the audit. Fixed in meaning that all the fees for the engagement are wrapped and bundled into one price. This “fixed fee” also includes any out of pocket travel and miscellaneous expenses that the CPA firm would incur for doing the audit.

Buyer beware, as not all “fixed fees” are the same. Some “fixed fee” have clauses that say the “fixed fee” is only for the engagement itself and does not include travel or any other expenses you may incur. Additionally, some fixed fees may include the travel and out of pocket expenses may also bill you for preparing reports, after audit consulting fees, etc.

In short, read the fine print and make sure the “fixed fee” really is fixed. Another point, make sure the fixed fee gradually goes down after year one. Why? Because the CPA firm conducting the audit should have a good working knowledge of your company, thus fees should be marginally reduced for subsequent years (5 to 10 percent). However, if your scope changes, then expect the fees to go up.

To learn more about SAS 70 audits, visit the official SAS 70 Resource Guide.


Sep 26 2008   5:18PM GMT

SAS70 Pricing for Type I & Type II Audits | Important Facts



Posted by: Charles Denyer
sas70, sas70 sample reports, sas 70 type ii, SAS 70 Type I, sas70 pricing

SAS70 pricing for Type I and Type II audits is still a hot topic for regulatory compliance these days, and for good reason. The huge rise in SAS70 audits over the past five years has created a true need for accountants and auditors to perform these specialized audits. As a SAS70 auditor for many years now, i have noticed some interesting trends regarding SAS70 pricing along with my thoughts on where they will be going.

First and foremost, SAS70 pricing has gradually moved towards a “Fixed Fee”, that is, a SAS70 audit price that also includes travel and any out of pocket miscellaneous expenses. If you’re organization is looking to become SAS70 compliant, then get a fixed fee for all the proposals you receive.

Prices are coming down-Five years ago, only a handful of accounting firms conducted SAS70 audits. Taken a look at Google lately to search for the term “SAS70″ and WOW, CPA firms are everywhere! Well, that’s good news for service organizations looking to become SAS70 Type I or Type II compliant.

Pricing will probably stabilize. For a good quality reputable SAS70 firm, SAS70 Type I and Type II fees are becoming very reasonable. What’s more, good firms have also figured out a way to do more and more work remotely, thus minimizing business interruption for their clients.

To learn more about SAS70 pricing or to receive a complimentary SAS70 Type II audit report, then visit the official SAS70 resource guide at www.sas70.us.com