SAS70

125 pts.
Tags:
Auditing
Compliance
Risk analysis
SAS 70
When benchmarking a SAS70 audit to determine if the necessary controls were audited, what standards do you use as guidance to determine the controls to be tested and the control objectives? Does IT rely on internal audit for guidance or do you have your IT processes documented?
ASKED: June 20, 2008  5:13 AM
UPDATED: June 25, 2008  5:12 PM

Answer Wiki

Thanks. We'll let you know when a new response is added.

There is a standard template for Control Objectives available on the AICPA website. That is usually very useful in beginning to understand control objectives.

The Control Objectives are a lot like Policies – they make a statement. From there you need to have control procedures that meet the control objectives – these are what the auditors will test to confirm that your controls are in place.

It’s also good to consider what clients are asking for a SAS 70 report. What applications do they care about? There are good application Control Objectives you can apply to such applications.

Try reading some SAS 70 reports from companies similar to your own for some ideas.

Discuss This Question:  

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following