SAS 70 Audit or SAS 70 Certification?
By Ben Osbrach, National Risk Advisory Leader
This is undoubtedly the most common question I received throughout the day…every day! The simple answer is that SAS 70 is not a certification, it is an audit framework designed by the American Institute of Certified Public Accountants. This widely known audit standard that is completed by CPA firms has become rapidly referred to and perceived across the industry as a certification. Unfortunately we do not have the benefit of issuing one page certificates or a stamp of approval, but we are faced with issuing reports sometimes 100+ pages in length to accurately describe and evaluate a company’s operations. If you want to be correct, let’s call it a SAS 70 Audit, if you want to be understood then maybe we just continue calling it a certification.