RECMGMT-L Archives

Records Management

RECMGMT-L@LISTSERV.IGGURU.US
Options: Use Forum View

Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: SAS 70 Audit
From:
Angie Fares <[log in to unmask]>
Reply To:
Records Management Program <[log in to unmask]>
Date:
Mon, 29 Nov 2010 14:45:10 -0600
Content-Type:
text/plain
Parts/Attachments:
text/plain (50 lines) 
If an SAS-70 Audit has not been performed, then we would look for an
alternative certification that indicates informed independent third
party review of control processes in the service provided.  For example,
if a shred provider did not have a SAS-70 Audit on file, then I would
ask for NAID certification.

 

-----Original Message-----
From: Records Management Program [mailto:[log in to unmask]] On
Behalf Of PeterK
Sent: Wednesday, November 17, 2010 7:07 AM
To: [log in to unmask]
Subject: SAS 70 Audit

Is anyone out there requiring third party vendors (record centers, data
centers, shredding companies, imaging service bureaus, whatever) to
undergo an SAS 70 audit?

"SAS No. 70 is generally applicable when an independent auditor ("user
auditor") is planning the financial statement audit of an entity ("user
organization") that obtains services from another organization ("service
organization"). Service organizations that impact a user organization's
system of internal controls could be application service providers, bank
trust departments, claims processing centers, data centers, third party
administrators, or other data processing service bureaus."
http://sas70.com/sas70_overview.html

thanks in advance

--
Peterk
Richmond, Va
"The problems of our economy have occurred not as an outgrowth of
laissez-faire, unbridled competition.
They have occurred under the guidance of federal agencies, and under the
umbrella of federal regulations."
Senator Ted Kennedy, in defending trucking deregulation in 1978.

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance To unsubscribe
from this list, click the below link. If not already present, place
UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]

ATOM RSS1 RSS2