*Organization Name:

*Address:

*City, State, Zip:

*Contact Name:

What is the size of your organization - revenues / volume of business, number of employees etc?

Identify all services provided to your customers that need to be covered within the scope of the SAS 70 audit.

Who is requiring your company to obtain the SAS 70 audit? Identify approximately how many customers need to be covered by the SAS 70 audit and what is the contractual vehicle (e.g. MSA, contract, hosting agreement)?

List all locations which are involved in providing the in-scope services, please include any, data centers, service / processing sites, software development or other key locations.

Identify all application systems that support the provision of the in-scope services. In parentheses, note if the application is (purchased), (hosted by a service provider) or (developed in-house).

Identify all third-party service providers used to support the in-scope services. Which of these provide SAS 70 reports?

Which regulations such as SOX, GLBA, HIPAA or other regulations apply to your company?

When would the organization prefer the fieldwork be performed?

Does the organization have a reporting deadline? If so, identify the deadline for the final report.

Additional Comments