As a form of internal control, a SAS 70 audit is least likely to address which of the following risks associated with ASPs?

Question

Quizplus · Accepted Answer

A SAS 70 audit primarily focuses on evaluating the effectiveness of a service provider's control procedures related to financial reporting. Inability to pay monthly fees is not directly related to financial reporting, hence it is the least likely to be addressed by a SAS 70 audit. The other options, compromised data, financial costs associated with setting up a computer network, and cost of purchasing software, are more directly related to the audit scope and are likely to be addressed.

As a Form of Internal Control, a SAS 70 Audit