SAS 70 Audit Services are provided by Mayer Hoffman McCann P.C., an independent CPA firm that is associated with CBIZ.

What is a SAS 70 Audit ?

SAS 70 engagements are detailed examinations of the internal controls over the policies and procedures of service organizations. The examination covers both operating and information technology controls. User organizations (customers of service companies) or the auditors of user organizations typically require the SAS 70 reports. Recently, we have seen that more companies are taking the initiative to have a SAS 70 engagement performed for internal assurance and as a means to differentiate their service. Only an independent certified public accountant (CPA) firm can perform a SAS 70 audit.  Through our association with Mayer Hoffman McCann P.C. (MHM) we can introduce you to qualified professionals who are able to conduct your SAS 70 Audit.

One of the most effective ways a service organization can communicate information about its controls is through a Service Auditor’s Report. There are two types of Service Auditor’s Reports: Type I and Type II.  For additional information on SAS 70, download the SAS 70 Overview  document.

SAS 70 engagements are performed by the independent  CPA firm of Mayer Hoffman McCann P.C.  For more information on SAS 70 audits and other services that can be provided by Mayer Hoffman McCann P.C.  click here. 

MHM's Approach

MHM performs a series of tests and make extensive inquiries to various employees involved in the service process. MHM then provide you with a report containing a description of your controls and control objectives, a discussion of the tests performed, and our findings in the following areas:

• Operations and control environment
• Monitoring and risk assessment
• Information systems and general computer controls
• Control of access to computer programs and security of data
• Control of new development and changes to existing programs and systems
• User responsibilities

Your SAS 70 will:

• be performed by individuals with extensive experience in performing SAS 70s for managed service providers.
• be performed by a team of professionals dedicated to our SAS 70, Sarbanes-Oxley, internal audit, and internal control practice.
• be managed and performed by individuals with the Certified Information System Auditor (CISA) accreditation.
• be performed with excellent service at reasonable rates.
• conclude with the submission of a comprehensive management letter with suggestions for enhancements to your operating efficiency
  and internal control.