Changes to SAS 70: Are you Ready?


Compliance audits of outsourcing service provider arrangements have become increasingly common over the past few years, especially for service scope affecting public companies’ financial reporting. In 2011, changes will take effect that may cause outsourcing customers to amend their approaches auditing of service provision arrangements.

Over the last 20 years, organisations that outsource functions (“user organisations”) have become comfortable using the AICPA Statement on Auditing Standards No. 70 (“SAS 70”) as a means to audit a service provider’s controls that affect the internal controls of the user organisation. One effect of the Sarbanes-Oxley Act of 2002 (“Sarbanes-Oxley”) was that companies which publicly traded their securities in the U.S. markets were required to comply with significantly more stringent audit requirements. As a result, reliance by user organisations on SAS 70 reports provided by service providers was of even greater importance and, over the past 8 years, user organisations and service providers worked out reasonable methods of allocating risks associated with internal controls.

Please see full alert below for more information.

LOADING PDF: If there are any problems, click here to download the file.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Morrison & Foerster LLP | Attorney Advertising

Written by:


Morrison & Foerster LLP on:

JD Supra Readers' Choice 2016 Awards
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.

Already signed up? Log in here

*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.