If your company is a service organization or other business which gets involved in processing information, such as a data center, credit processing center, claim center, or other transaction processing center, your customers may request or require assurance that your business has sufficient and effective controls in place to ensure you are and will be able to effectively meet your business commitments. The American Institute of Certified Public Accountants (AICPA) developed a standard for assessing the internal controls of a processing center, that standard is known as a SAS 70 report.

SAS 70 reports can be conducted at two primary levels or depths. A Type I report is a base level report which assesses how effective the company’s controls operated for a set time period. A Type II report is more thorough because of the level of testing that takes place on those controls.

CRI can provide your company assistance in securing either a Type I or a Type II SAS 70 report, providing you with valuable information, and allowing you to provide assurance to your customers.