statement on auditing standard 70 (SAS 70)
The acronymSAS 70 stands for Statement on Auditing Standard 70, which is an audit report on the control systems used in production, service and service companies. Such a SAS 70 audit report deals with the business processes of companies that provide their services to other companies, the functionality and efficiency of the control systems and the regulations with which the supplier companies work.
The SAS-70 report is prepared by auditors. At the end of the audit, they prepare the Service Auditor's Report , which certifies the companies an independent assessment of their control systems and services. The SAS-70 report is a standard report that is to be seen in connection with the requirements of the Sarbanes-Oxley Act (SOX) and is also increasingly being requested in tenders.
There are two variants of the SAS-70 report: Type I documents the performance of controls and how it is achieved. The SAS-70 Report uses the term Design Effectiveness in this context. Type II supplements the Type I test report in that the effectiveness of the controls, Operating Effectiveness, is considered. In addition, the second report demonstrates functional capability.