SAS 70 to SSAE 16: How to Review your Vendors Internal Control Report

Posted by Teresa Bockwoldton February 29, 2012
Read More

Tags: AICPA, SSAE 16, SOC, internal control, SAS 70, service organization controls

Change to Sarbanes-Oxley Section 404 Requirements in 2012 Likely

Posted by Teresa Bockwoldton February 22, 2012

New legislation is gaining steam that would change the definition of which companies are subjected to an external audit review of their internal controls (e.g., Sarbanes-Oxley Section 404(b)). The bill, called 'H.R.3606 - Reopening American Capital Markets to Emerging Growth Companies Act of 2011,' passed the House by an overwhelming bipartisan vote of 54-1. The bill still has to go through the Senate and then get Presidential approval before it becomes law (you can follow the progress here: http://www.opencongress.org/bill/112-h3606/show). 

Read More

Tags: Internal Controls, Sarbanes-Oxley Articles & Information, 404, SOX, AICPA, 404 audit, audit costs, Non-accelerated filer 404(b) information, Sarbanes-Oxley Training, Sarbanes-Oxley, external auditing, Internal Control Education

Auditors Losing the Right to Audit and What this Means for Your 10Q/K

Posted by Teresa Bockwoldton October 14, 2011

 Google SAS 104-115 and you will find mostly articles by us (Vibato) discussing the need for auditors to pay special attention to internal controls as part of their audit. Why? Because the AICPA & the PCAOB dictates standards that the auditors must adhere to in order to perform their audits. Parts of these requirements include reviewing your internal controls and this applies to ANY COMPANY THAT IS AUDITED – public, private, non-profit; it doesn’t matter. If you are audited, your auditors must look at your internal controls as part of your audit. If you do not have any documented internal controls then be prepared for a higher audit bill because your auditors will have to go looking for internal controls at your company on your dime year-over-year. Moreover, due to independence issues, they are not allowed to share their work with you to use going forward so they will do this work each year and all you will see for it is a higher bill. Period.

Read More

Tags: PCAOB News & Information, financial risk, Accounting Tip of the Day, 404, audit, AICPA, Controls Testing, 10k, Internal Control Education

SAS 70 to SSAE 16 - A New Standard for Service Organizations

Posted by Nancy Johnsonon June 3, 2011

SSAE 16 - a new accounting standard for evaluating service organizations' operational and financial controls - will replace SAS 70 effective June 15, 2011.

Read More

Tags: AICPA, SSAE 16, SOC, internal control, SAS 70, service organization controls