CFOs who put too much trust in this high-profile report may be putting their companies at risk.

David McCann
- CFO Magazine

September 1, 2010

SAS 70 certification validates that Sabrix operates as a certified
and trusted outsourced tax research provider that meets the rigorous
operational controls associated with Sarbanes-Oxley compliance.

That declaration, which resided at press time on the Website of
Sabrix, a tax-management software-as-a-service (SaaS) provider, is
typical of the language that SaaS vendors and other third-party service
organizations use to highlight the importance of auditor reports that
are based on the guidance known as Statement on Auditing Standards No.
70.

Yet the professionals that conduct SAS 70 audits and the organization
that develops auditing standards both warn that such descriptions often
mischaracterize the nature and purpose of SAS 70. While marketers
routinely exaggerate

The Truth About SAS 70 - CFO Magazine - September 2010 Issue - CFO.com http://bit.ly/cnOSCY