SAS 70 is Statement on Auditing Standards No. 70, Service Organizations. It means all customers who get a SAS 70 audit from a service provider aren’t getting any real security assurances. AICPA provides a comparison brochure for SAS 70 vs. SysTrust. Wikipedia has some opinion on ISO 27001 too. Do any of you recommend a certain standard to show your company is implementing effective security practices? Do you know a standard? Share it with us on iReport.com.”]
Source: https://taosecurity.blogspot.com/2006/12/thoughts-on-sas-70-and-other-standards.html