Appropriateness of Control Objectives and Controls

How do you determine whether control objectives and the related control activities are appropriate? Control objectives need to be individually tailored to the activities performed by the service organization. Moreover, they need to address “[a]ll the major aspects of the processing that may be relevant to user auditors…” (AICPA SAS 70 Audit Guide 4.13). Consequently, […]