SAS 70 and ISAE 3402
In February 2011, ICC completed a SAS 70 Type II audit. SAS 70 is the Statement on Auditing Standards No. 70 and was at the time the most commonly-used standard for auditing service providers.
The SAS 70 audit reports were delivered to ICC Partners and their Internal Auditors to provide an understanding of the effectiveness of ICC’s internal controls and its ability to deliver quality, managed services. As of 15 June 2011, the SAS 70 standard was superseded and ICC will now be audited under a succeeding standard: ISAE 3402. Like SAS 70, ISAE 3402 is globally recognised as the standard for auditing service providers. It focuses on audits of internal controls that may impact or relate to financial reporting.
Independent auditors have performed an ISAE 3402 Type II audit of ICC’s internal control framework, covering the period 1 January to 30 June 2013. ICC’s internal control framework is based on COBIT 4.12 framework for ICT management and governance.
The ISAE 3402 Type II Auditor’s Report provides ICC Partners with a detailed description of ICC’s internal ICT controls and an independent assessment of whether these controls were suitably designed and operated effectively for the audit period.