|
|
 |
SAS70 Project
'Statement on Auditing Standards No. 70: Service Organizations' is a widely recognized auditing standard developed by the American Institute of Certified Public Accountants (AICPA). ICC's implementation of SAS70 uses the CobiT 4.1 control framework to ensure that adequate controls and safeguards are in place and being used vis-à-vis the hosting and/or processing of data belonging to Partner Organizations.
The definitions phase will complete in 2008 and, starting in 2009, ICC will begin measurement and auditing its control objectives in preparation for obtaining a Service Auditor's Report in the second half of the year.
The SAS70 project is one of the many initiatives that the Centre pursues in order to build, test and verify the quality of service provision. Other related activities are continuous Quality Audits coupled with Continuous Process Improvement. These two business processes are used to audit and improve internal processes and procedures.
|
|
|
Recommend