The Statement of Auditing Standards (SAS) number 70, Service Organizations, is an auditing standard developed by the American Institute of Certified Public Accountants (AICPA). Its purpose is to enable an auditor to evaluate the design and test the effectiveness of controls and issue an opinion on the controls that a service organization has in place. The output, the Service Auditor’s Report, contains the auditor’s opinion, a description of the controls in place, and if it is a Type II report, a description of the auditor’s tests of control effectiveness.
The PwC SAS70 Approach
The PricewaterhouseCoopers approach combines the actions to be undertaken to build and establish a Controls Framework by the client (bright boxes) at the same time as the phases for the SAS70 Type II attestation take place (dark boxes).
Your Benefits
- We provide assurance both to your client and to yourself so that you can rely on the established Control Framework
- With a good reliance on controls you mitigate your (and your clients) risks
- A proper Control Framework ensures best the delivery of high quality customer services
- We provide tailored solutions which empower you to satisfy the needs of your customers auditor’s, thus resulting in less interruptions of your daily business, since other auditor’s rely on our reports
- Transparency of your Control Framework supports customer retention as well as it is a competitive advantage attracting new clients, particulary the ones which are facing the new control related requriements (e.g. Sox)
Why choosing PricewaterhouseCoopers as your partner
- We have a world wide network of specialists with proven market and technology background
- As a leading auditing company we know the challenge and pitfalls in establishing a Controls Framework – our methodology includes it
- With our solution-oriented way of proceeding we are partnering with you to optimise your comfort on controls
