"Hancock & Dana’s professionals are proactive – they truly care and have made a significant difference in helping me accomplish my goals."

– Randy, business owner

SAS 70

Since the introduction of Sarbanes-Oxley in 2002, many companies with SEC-registered customers are required to be SAS 70 compliant. In addition, SAS 70 reports are being required by many user organizations that outsource to service providers.

At Hancock & Dana, we specialize in SAS 70 examinations with a process that is customized for each client to efficiently highlight internal controls, processes, values and integrity.

Hancock & Dana partners with a national technology consulting firm to deliver SAS 70 services. This approach allows us to leverage our partner’s expertise in providing the appropriate depth of examination coverage in highly technical areas.

We provide three types of SAS 70 examinations:

SAS 70 Readiness Assessment – designed to assess a service organization’s preparedness for a Type II SAS 70 examination. Identifies controls that the service organization should either implement or improve before engaging in a Type II examination.
Type I SAS 70 Examination, Report on Controls Placed in Operation – reports on a service organization’s description of the controls that may be relevant to a user organization’s internal control. Provides third-party verification as to whether such controls were suitably designed to achieve specified control objectives, and whether they had been placed in operation as of a specific date.
Type II SAS 70 Examination, Report on Controls in Operation and Tests of Operating Effectiveness – reports on a service organization’s description of the controls that may be relevant to a user organization’s internal control. Provides third-party verification as to whether such controls were suitably designed to achieve specified control objectives, on whether they had been placed in operation as of a specific date, and whether the controls that were tested were operating with sufficient effectiveness to provide reasonable, but not absolute assurance that the related control objectives were achieved during the period specified.

Home I About I Our Professionals I Services I Industries I Careers I Stewardship I Contact Us I Resources I Privacy Policy