Service Organizations - what kind of sox audit? 2882



  • Hi,
    I’m new here, and I have a very basic question.
    My Organization is an IT outsourcer. For some clients we have received until now sas 70 audits from Auditors requested by the Client.
    Now the new administration decided to be SAS 70 Type II compliance.
    My questions are:

    • Is it possible to be an Outsorcer and have itself a SAS 70 Audit, or is other kind of audit.
    • If it is possible, can I choose the Domains, the processes and the control objective ?
      Thanks in advance for the help.
      Azevedogreen

Log in to reply