differences between SAS70 and isae 3402?

ANSWER TO THE ABOVE QUESTION First ISAE is not an auditing standard. And its scope is not limited to financial reporting/auditing. The 3 important new requirments in ISAE3402 attestation standard are 1. the service organisations management need to provide confirmation of the fair presentation of the facts regarding the system description and the controls in place and the effectiveness of controls. 2. The internal audit controls, description of tests and the extent to which the external auditor relied on these internal audit has to be mentioned in the report The intention might be to check if the audit controls in place are effective in helping the auditors reach their conclusion. To show if the controls in place sufficient. 3. The subservice organisations of the company being certified should also be certified with ISAE 3420.