Risks to the Service Organization

What Risks Should be Covered in a SAS 70 Audit? A SAS 70 audit should address “[a]ll of the major aspects of the processing that may be relevant to the user auditors in assessing the risks of material [financial statement] misstatement” (AICPA, 2009 SAS 70 Audit Guide 4.13).  This means addressing the risks associated with processing.  For example, a service organization may print...

Read More

Linford & Company Signs New Agreement

On May 13, 2010 Linford & Company entered into an agreement with a company in the healthcare industry to provide the company with SAS 70 audit services. Organizations providing services to regulated industries are increasingly being scrutinized over their internal control environments. Currently, a SAS 70 examination is the only independent method for service organizations to represent to...

Read More

Website Relaunched

We put our site into WordPress to make it easier to update our blog and news area, as well as other pages on our site. WordPress is an open source content management system (CMS) that makes it significantly easier for business and individuals that operated certain types of websites to update them on a frequent basis. We are excited to have our new site up and running and will be posting blog...

Read More

Audit Sampling for SAS 70 Audit Examinations

“Audit sampling is the application of an audit procedure to less than 100 percent of the items …for the purpose of evaluating some characteristic…” (AICPA, Audit Sampling Guide 2.19). Audit sampling is used in the context of a SAS 70 audit as a basis to form a conclusion on the operating effectiveness of controls for a Type II report.  A walkthrough is generally considered...

Read More