Sample Readiness Agenda

1. Introductions
    
2. SOX vs. SAS 70
   1. SOX - Internal control over financial reporting
   2. SAS - Internal controls over a service provided to others
       
3. C. Benefits of a SAS 70
   1. Differentiation from competition
   2. Demonstration of effective controls
   3. Reliance on controls by user auditors (Type II)
       
4. D. Overview/discussion of what to expect from a SAS 70 engagement
   1. Define SAS 70 and discuss Type I vs. Type II opinion and scope
   2. Time period covered
   3. Overview of expectations
      • Description of the controls - Client
      • Description of the user controls - Client
      • Control objectives - Client
      • Control activities - Client
      • Tests of controls - Auditor
        1. Inquiry of appropriate personnel
        2. Inspection of documents, reports, or other data
        3. Observation of the application of the controls
        4. Reperformance of the control
   4. Other information - Client
   5. Expected time frame of engagement
   6. Example of document request
   7. Questions and comments

<< Back to the Readiness Process