Listing of outside service providers identified as S-Ox in scope and most recent associated SAS 70 reports if any (see FM 900-20-11). Other pertinent data include reports of examination on the operating effectiveness of controls conducted at provider sites.