These engagements have historically been referred to as SAS 70 engagements because the guidance for service auditors was contained in that auditing standard. The guidance for service auditors has been moved to the attestation standards, while guidance for user auditors remains in the auditing standards. The attestation standards provide guidance for service auditors who are engaged by a service organization to issue one of two types of reports on controls at the service organization relevant to user entities’ internal control over financial reporting: