Our internal Audit Department needs to obtain a report from our financial institutions in order to understand their controls related to comp

Anonymous (Marketing Coordinator)
| Apr 21, 2011This question was asked by an attendee at a recent Proformative SAS 70/SSAE 16 event: Our internal Audit Department needs to obtain a report from our financial institutions in order to understand their controls related to compliance operations. An SSAE16 SOC 2 report seems to be the most appropriate. However, they want this report covering the period of 2010, would you think SAS 70 Type II is appropriate for their purpose? Please note that we don't outsource key processes to the banks. We simply use banking services like controlled disbursement, depository services, etc.
