Home > IT Answers > Security > SAS-70 certification
JohnDough
5 pts.
 SAS-70 certification
Auditing (compliance), Auditing Standards, CPA, IT certification, SAS 70
I have a quick question regarding SAS-70 Certification. If my company completes a SAS-70 audit, does that automatically make us certified or are there additional steps for certification? also when we get certified how long does that certification last before it will need to be renewed? any information would be very helpful.   Thanks



Software/Hardware used:
ASKED: January 11, 2011  3:36 PM
UPDATED: January 19, 2011  3:23 AM
RELATED QUESTIONS
Answer Wiki:
As far as I know once you complete all steps pertaining to the audit process you have certified your company for SAS70. As far as how often you perform the audit, that may depend on your customers' requirements or other certifications. We perform a SAS70 type II every year.
Last Wiki Answer Submitted:  January 12, 2011  5:31 pm  by  Spadasoe   5,130 pts.
All Answer Wiki Contributors:  Spadasoe   5,130 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

 

ditto spadasoe. We have several products in our company. We have to certify each of them separately to be certified.

Shilpa Venkateshwaran
 2,500 pts.
 

Please remember that a SAS 70 audit is not a certification. Rather the auditor is giving an opinion over the controls. The report should be provided to your customers in its entirety. A SAS 70 audit is typically performed once a year. SAS 70 is being superseded by SSAE 16 effective June 15, 2011 so you should inquire of your provider regarding the steps your organization should take to transition to the new standard.

Best regards,
Scott

scott.price@aligncpa.com

SOCguy
 10 pts.
 

just to let you know that SAS70 is going to obsolete. it will be changing to a new name.

jinteik
 15,485 pts.