The SAS 70 report is intended to communicate, from auditor to auditor, the testing performed around the outsource provider’s internal controls, particularly controls over IT processes. This report provides an example of how to communicate the findings of a Type II SAS 70 review when a company outsources the processing of its employee payroll checks. It assess how the results of the report impact the company’s SOX compliance process.