Does anyone have a checklist or recomend a process for reviewing SAS 70 reports on key vendors. I am trying to build a tool so that each report is reviewed consistently and any processing weaknesses that might impact us are identified. Anyone have something they would be willing to share!

The only thing that I review is the "User Considerations," section. I make sure that management has reviewed and responded to the items contained therein and ask for this report.

Thank you both for your suggestions.