2-IT Security: Auditing SAS 70 standard