The difference between a SAS 70 Type I and Type II report is:
A) Type II reports extend Type I reports by testing the operating effectiveness of controls.
B) Type II reports extend Type I reports by testing the design effectiveness of internal control.
C) Type II reports occur prior to year-end.
D) Answers C and A.

Question

Quizplus · Accepted Answer

Type II reports extend Type I reports by testing the operating effectiveness of controls, while Type I reports only attest to the design of controls. Type II reports also cover a longer period of time and occur over a full year, whereas Type I reports can occur at any time. Therefore, the correct answer is D, which includes both A and C.

The Difference Between a SAS 70 Type I and Type