Third Party Service Providers 360



  • My client uses a third party facility to store it’s product. These providers are privately held and not subject to SOX. We are trying to determine if a SAS 70 audity is needed or if there is some other way to evaluate their controls - or if they actually need to be evaluated at all.



  • This post is deleted!


  • or if they actually need to be evaluated at all.
    I would suspect that you are in this territory.
    If they are storing your product does this mean we are talking about an external warehouse? If so then I would expect your company still to have some control over its inventory such as regular stock check, confirmation as to quantities from 3rd party provider, etc.
    If you ask them for a SAS 70 they would be entitled to tell you where to go.


Log in to reply