4 ms·
http://sas70.com/sas70_faqs.html http://sas70.com/sas70_faqs.html ; Question #2 - who can perform/sign off on audits? Only CPAs.
by patrickgzill 14y ago
http://sas70.com/sas70_faqs.html http://sas70.com/sas70_faqs.html ; Question #2 - who can perform/sign off on audits? Only CPAs.
- dredmorbius 14y agoThanks. And again: what the audit entails is interviews, requesting and reviewing records, and the like. This doesn't guarantee that a SAS70 site is doing what it says it's doing. But if there are gross inconsistencies in the statements and documents, they should stand out. From there, use the SAS70 report as a basis for your own questions. There are some very good summaries of things to as at sites such as ServerFault, WebHostingTalk, O'Reilly, and elsewhere. If the SAS70 report says that all access is controlled, but you find you're able to casually stroll through the main door ... something's not adding up. Dig deeper.