Linford & Company celebrates two years

Linford & Company celebrates a successful two years in business.

Read More

Appropriateness of Control Objectives and Controls

How do you determine whether control objectives and the related control activities are appropriate? Control objectives need to be individually tailored to the activities performed by the service organization. Moreover, they need to address “[a]ll the major aspects of the processing that may be relevant to user auditors…” (AICPA SAS 70 Audit Guide 4.13). Consequently, service organizations...

Read More

Qualified Opinions

What is a qualified opinion and what does it mean? A qualified opinion means that either the internal controls were not designed (Type I or II) or operating (Type II only) effectively for one or more control objectives.  Qualified opinions (also known as “dirty opinions” in audit jargon) are actually quite common.  Most service organizations that have received a qualified opinion received...

Read More

Subservice Organizations and the Carve-out or Inclusive Method

What Role Do Subservice Organizations Play in the SAS 70 Audit? By definition, subservice organizations perform at least some function of the service organizations’ outsourcing activities.  If the subservices perform functions that are relevant to the user organizations, then the report needs to disclose and describe role that the subservice organization plays.  The intersection with the SAS...

Read More