SAS 70 (the Statement on Auditing Standards No. 70) is an auditing standard auditors must use to ensure organizations, such as print and mail companies, have complete control of any data that they are processing for their customers.
According to an article entitled, “What is SAS 70 Certified and What is the Difference Between Type I and Type II?”, Amy Nutt says that “This extensive audit measures that the organization has total control and has safeguards in place that does not compromise any data that they process for their customers. In other words, the job of the audit is to evaluate every aspect of the service organization that handles customer data or could result in a possible leak of customer data.”
Companies that are SAS 70 certified compile all information gathered during the audit into two different types of reports: Type I and Type II.
According to Nutt, “A type I report takes the organizations description of their own controls at a certain point in time and describes those descriptions. The report includes the report by the independent auditor, which is simply the auditor’s opinion, and it includes the organization’s descriptions of their internal controls.”
The main difference between the two different reports is that with Type II it is mandatory for the auditor to perform tests and record the results of those tests. This is optional with type I.
Your business will benefit from SAS 70 because it allows an unbiased individual to ensure that your data is safe. Experienced print and mail companies such as Triadex Services offer both types of SAS 70.
