|
Latest
News and Information:
February
17, 2010: We’ve launched a new page to provide you
with information on the new International (ISAE 3402) and US (SSAE 16)
Standards on Service Organization Reporting.
Click here to visit the
new page.
January
29, 2010: The Auditing Standards Board (ASB) of the
AICPA has issued Statement on Standards for Attestation Engagements (SSAE)
No. 16, “Reporting on Controls at a Service Organization.” This new Standard is similar to the global
standard (ISAE 3402). SSAE No. 16 will
supersede SAS No. 70. The effective
date for SSAE No. 16 will be for service organization reports with periods
ending on or after June
15, 2011.
December
18, 2009: The IAASB has issued ISAE 3402, “Assurance
Reports on Controls at a Service Organization.” Read more from the official news release. The global
standard can be downloaded from the IFAC web site.
January
26, 2009: On November 17, 2008, the AICPA's
Auditing Standards Board (ASB) released two exposure drafts for public
commentary. Both exposure drafts pertain to a new Statement on Auditing
Standards (SAS) and a new Statement on Standards for Attestation Engagements
(SSAE).
January
31, 2008: The International Accounting and
Auditing Standards Board (IAASB) released an exposure draft of the proposed
global standard (ISAE 3402) for reporting on Service Organizations. Click here
to access the exposure draft from the IFAC web
site.
July 25,
2007: The SEC
approved AS 5 on July
25, 2007 and is effective for audits of internal control over
financial reporting required under Section 404 for fiscal years ending on or
after November
15, 2007.
May 24,
2007: The SEC
and PCAOB have issued new guidance for
issuers and auditors. The SEC issued interpretive guidance for
conducting management's assessment, and the PCAOB issued Auditing Standard
No. 5 (AS 5), which supersedes Auditing Standard No. 2 (AS 2). Updates
have been made on the Sarbanes-Oxley
page and the FAQ pages.
May 16,
2005: The SEC
and PCAOB have issued new information
releases and updated FAQ following the April 13, 2005 SEC roundtable on
SOX 404. Updates have been made on the Sarbanes-Oxley page and the FAQ pages.
July 23,
2004: Updates have been made to the Sarbanes-Oxley page and to the FAQ pages to reflect recent
commentary made by the SEC and PCAOB regarding the implementation of
Section 404 and the applicability of SAS 70 service auditor's reports in
evaluating controls at a service organization.
March 23,
2004: PCAOB
standard on audits of internal control is officially released. Appendix
B of the standard confirms the applicability of SAS 70 and service auditor's
reports when management is conducting its assessment of internal control over
financial reporting. Read more on the Sarbanes-Oxley page of this
site.
January
10, 2004: Additional information is added to the
Sarbanes-Oxley page based on
recent releases from the Public Company Accounting Oversight Board.
March 21,
2003: New FAQ is added to the FAQ page related to the
requirements of Section 404 of the Sarbanes-Oxley Act.
January
24, 2003: New updates related to the AICPA's new
Trust Services and
information on the history of
SAS 70 including a timeline
of related auditing standards.
June 21,
2002: The AICPA
has released the audit guide entitled "Service Organizations, Applying
SAS No. 70". The audit guide is designed to provide guidance to
auditors of companies that use service organizations. The audit guide
can be ordered from the AICPA's web site at www.cpa2biz.com
or by calling 1-888-777-7077. The audit guide is listed as publication
number 012772SK.
March 26,
2002: The FAQ section was updated to
include information on the AICPA's recommendation about the treatment of
business continuity planning and disaster recovery activities at a service
organization when conducting a service auditor's examination. Go there now.
March 25,
2002: The AICPA
will release a new audit guide entitled "Service Organizations, Applying
SAS No. 70" on April 12, 2002. AICPA publications are generally
available for order on-line at www.cpa2biz.com.
As soon as we have more specifics, we will post them here.
February
13, 2002: The FAQ section was updated to add
information on security standards: ISO 17799 and BS 7799.
March 5,
2001: The FAQ section was updated to
reflect recent changes to the SysTrust and WebTrust principles and criteria.
February
23, 2001: Added a new Feedback Form on the "Contact Us" page. This
will make submitting questions and feedback a lot easier.
February
15, 2001: The FAQ section was updated to
reflect the changes to the ISO 9000 family of standards, which became
effective on December
15, 2000.
January
14, 2001: The FAQ section continues to be
updated. We also just celebrated our 4,000 visitor to the site.
Thanks for the feedback and support.
August
18, 2000: The FAQ section continues to be
updated. Some great questions have been coming in from around the
world!
June 20,
2000: The Frequently Asked Questions (FAQ)
section is updated with additional information. Keep those
questions coming in! Send your questions to: info@sas70.com .
May 22,
2000: Added the Frequently Asked Questions (FAQ)
section . Check back often as the FAQ will be updated
periodically. Send your questions to: info@sas70.com .
May 19,
2000: Added the "About SAS 70" section ;
added the site credits section; and updated the "Contact Us" section .
May 10,
2000: www.sas70.com is officially
launched. Frequently Asked Questions (FAQ) pages are currently under
construction.
|