Can I get hold of a copy of an SAS 70 questionnaire that auditors might present?
Home > IT Answers > Security > Can I get hold of a copy of an SAS 70 questio...
Skydivejersey
5 pts.
0
Q:
Can I get hold of a copy of an SAS 70 questionnaire that auditors might present?
SAS 70 Type I, SAS 70, Statement on Auditing Standard 70, Auditing
I would like to have a look at the standard list of questions that an auditor might ask when undertaking an SAS 70 audit......
ASKED: May 21 2009  8:51 AM GMT
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
RELATED QUESTIONS
0
Labnuke99
26290 pts.
0
A:
 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0
  • AddThis Social Bookmark Button
Try this Google search. You might also find the Wikipedia entry on SAS70 of use.

In the IT trenches? So am I - read my IT-Trenches blog
Last Answered: May 27 2009  7:00 PM GMT by Labnuke99   26290 pts.
  •   
0
0
RSS - Discussions Help
Discuss This Answer:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

BrentSheets   6535 pts.  |   May 21 2009  12:25PM GMT

Moderator Note: Hello Skydivejersey and welcome to IT Knowledge Exchange. Some of your fellow ITKE members and TechTarget editors are blogging on audit and compliance topics. You might wish to visit the blogs for more information. Below are some blogs that may be of interest to you.

Sister CISA CISSP

Regulatory Compliance, Governance and Security

IT Governance, Risk, and Compliance

IT Compliance Advisor

Regulatory Reality

 

KevinBeaver   7610 pts.  |   May 22 2009  5:47PM GMT

If this information was available to the public the name brand auditing firms might not be doing (or re-doing) so many of these. Here’s some good insight on SAS70 audits.

You can look at the ISO/IEC 27002 criteria and then take things up a 20 or 30 thousand feet and you’ll be at about the right level of a SAS70 audit.

Just know that you can never, ever, ever (get my point?) trust that just because you “pass” a SAS70 audit that your business is secure from the risks that matter.

 
0