 |
SAS 70 Services at TravisWolff
Of great importance to customers of service organizations and online services providers is the reliable demonstration of the existence of adequate controls and security safeguards. Controls that protect customer data whether it is hosted or processed are vital to customer confidence. For this reason, a Statement on Accounting Standards No. 70 (“SAS70”) Report—whether Type I or Type II—is relied upon to provide a uniform and consistent reporting format regarding adequate controls. Such a report allows service organizations and providers to openly disclose their specific control activities and relevant safeguarding processes to the full satisfaction of their customers.
With TravisWolff, our clients can count on SAS 70 services that deliver independent, objective reporting that assesses the effectiveness of controls in the areas of design, implementation and operations. Our professionals, with significant experience in examining and assessing controls, can prepare a SAS 70 Report that will describe in detail:
|
- The tests performed to assess operational control effectiveness, as well as our professional insight on the tests’ results
- The evaluation we would make on design, implementation, and effectiveness of all controls being employed by an organization
- The control environment, control objectives and all key controls that are being utilized to sufficiently achieve the stated objectives
- Suggestions for remediation that we deem important to correcting or improving inadequate controls; or creating new controls, if necessary
|
Beyond a SAS 70 Report that offers the expected reliance on controls and safeguards, TravisWolff can also deliver other value in addition to a formal SAS 70 review engagement. For example, prior to conducting a SAS 70 review, we can help an organization assess its readiness to move to the formal stage. Frequently, this more informal approach identifies and corrects inadequate controls, allowing for a smoother and less costly formal review. Our SAS 70 review can also reduce or eliminate the need for the auditors of customers to do separate controls verifications, creating further efficiencies. When we have gone through such a review with our clients, they have solid assurances about their controls, can demonstrate their control commitment to their customers, and will identify ongoing opportunities to continuously improve various operational functions.
|
|
