SAS 70 / SSAE 16 Reports

Reporting on Controls at a Service Organization

For service providers that provide outsourced services that impact their customer’s financial statements, Bonadio & Co., LLC   provides SAS 70 services that assure their clients of the accuracy and integrity of their data. Throughout upstate New York, Bonadio is the CPA firm of choice for the preparation of both types of reports: “Type I” reports, providing a description of internal controls, and “Type II” reports, providing both a description of controls and tests of their operating effectiveness.  

Service providers are often excluded from participating in RFP’s if they do not have a SAS 70 report – it’s almost a necessity in order to compete in today’s economy – and it’s likely that your existing customers are requesting that SAS 70 reports be provided on an annual basis. 

We work with  payroll providers, third party administrators (TPA’s) for employee benefit plans, information technology hosting companies, banks and investment brokers, insurance claims processors, actuaries, outsourced billing companies, and many others to identify control gaps and assist management with designing and implementing effective controls and remediating those gaps that may be identified.

Bonadio’s SAS 70 services are much more than the production of a report - we view it as a collaborative opportunity to improve  the internal controls of the service provider.  To this end, we utilize an integrated team of SAS 70 professionals with Certified Information System Auditors (CISA) credentials and CPAs with financial statement backgrounds to streamline the process, while assisting management with continuous improvement.

As the new SSAE 16 (“Reporting on Controls of a Service Organization”) requirements are implemented, we will assist our clients in implementing any new required standards or approach.