Regulatory Compliance, Governance and Security

Aug 26 2008   11:10AM GMT

SAS 70 Audits and Third Party Administrators (TPA)



As a SAS 70 auditor for many years, i’ve seen a huge increase in the number of third party administrators (TPA) that are required to go through a SAS 70 Type I or SAS 70 Type II audit. Man of these TPA organizations are considered small, with limited budgets, thus they voice a great deal of frustration about the time and costs of this highly specialized audit process. What’s worse, many feel the value of the audit is simply lacking, as many CPA firms do not have the knowledge or background sufficient for auditing a Third Party Administrator (TPA).

With that said, it’s important you properly assess the value of the CPA firm for their overall expertise and knowledge for a TPA. The term TPA is a broad and much overused term, based on the fact that many organizations “administer” some kind of business function of claim, ranging from property and casualty to self funded health and benefits claims.

When assessing a CPA firm, ask them how many SAS 70 audits they have conducted on a TPA and also ask them if they can provide you with a SAS 70 sample report, whereby you can actually see and visualize their expertise.

Also, ask them for a fixed fee, as SAS 70 pricing is now becoming a very important issue for budget minded Third Party Administrators (TPA).

To learn more about SAS 70 audits, visit the official SAS 70 Resource guide, where helpful information awaits any interested reader.

1  Comment on this Post

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when other members comment.
  • Axismgmt
    Our Firm Insurance SAS 70 and Sarbanes Oxley Consultants for Errors and Omissions Insurance. One thing to think about when either hiring consultants or begining a new type of service is whether or not there is E&O coverage for the consultant. We often find that although CPA's or other consultants have E&O coverage, often SAS 70 opinions and regulatory actions are excluded from coverage. Unfortunately, this is often found out too late. Mike Smith Axis Insurance Services LLC
    0 pointsBadges:

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

Share this item with your network: