IT is a significant integrant in most companies. Because of this depence the requirements to IT supported business processes are inceasing steadily. This allowances set the subject of IT-compliance. So in the meantime a number of audits and certifications like PS 951, ISAE 3402 or SSAE 16. Because of increasing outsourcing of IT-services auditing of the supplier processes also in case of security get more and more importance. From there this named auditing standards has been developed. We have practical experience in SAS 70 (SSAE 16) certifications.