Click here to find locations






Fill out this form to request more information. Go ...



You are here: Home > Services > SAS 70 Services

SAS 70 Services

Set Yourself Apart with our SAS 70 Service Auditor Engagement
You need to differentiate yourself from your competitors. We can help you do this with our SAS 70 services for third-party service organizations. Although it was once true that SAS 70 engagements were only performed for the largest service providers, today, organizations of all sizes can demonstrate their commitment to internal controls by proactively obtaining a Service Auditor's Report. We have provided these reports for:

  • Outsourced servicers       
  • Software vendors       
  • Application service providers       
  • Insurance third-party administrators       
  • Claims processing centers       
  • Internet data centers       
  • Many other organizations

Our Approach
Only an independent certified public accountant (CPA) or CPA firm can perform a SAS 70 engagement. As one of the nation's top CPA firms with more than 75 years of exemplary service, our SAS 70 engagements adhere to specific professional standards established by the American Institute of Certified Public Accountants.

We offer two types of SAS 70 reports:
Type I -- Reports on controls placed in operation
Type II -- Reports on controls placed in operation and tests of operating effectiveness

In a Type II engagement, we'll provide you with a report containing descriptions of tests performed and our findings in the following areas:

  • Control environment   
  • Risk assessment   
  • Monitoring       
  • Computer general controls   
  • Computer application controls       
  • Information systems processing      
  • User responsibilities

Our practitioners have certifications and/or affiliations with information security and business continuity planning organizations such as the Information Systems Audit and Control Association and DRI International.

How You Will Benefit

  • You'll have a single source of information in a standardized format.       
  • You can use the report as a marketing tool, demonstrating to potential customers that you're proactive in obtaining a reputable third-party's opinion of the soundness of your organization's controls.       
  • Your management will receive an overall picture of performance.

 

RSM McGladrey Inc. and McGladrey & Pullen LLP have an alternative practice structure. Though separate and independent legal entities, the two firms work together to serve clients' business needs.