Risks to the Service Organization
What Risks Should be Covered in a SAS 70 Audit? A SAS 70 audit should address “[a]ll of the major aspects of the processing that may be relevant to the user auditors in assessing the risks of material [financial statement] misstatement” (AICPA, 2009 SAS 70 Audit Guide 4.13). This means addressing the risks associated with processing. For example, a service organization may print...
Read MoreAbout Linford & Company
We are specialists in the performance of SSAE 16/SOC 1, SOC 2, royalty, and HIPAA/HITECH compliance audits across technical disciplines. We issue SSAE 16/SOC 1 and SOC 2 reports for a wide variety of service organizations that go to many of the largest user organizations in the world. We perform royalty audits on some of the largest consumer brands in the world. Our healthcare team has provided HIPAA/HITECH compliance audits to both covered entities (e.g., hospitals, dental practice groups, etc.) and business associates (e.g., IaaS, PaaS and SaaS, among others).
 |
Follow us on our blog where we provide information about our firm, insight on guidance relevant to our services. |
 |
Subscribe to our newsletter. |