No. Departments should have the key processes and controls in place within their organization. Departments will need to ensure that they maintain sufficient evidence of review for the key controls, which has not been required prior to SAS 115 (formerly SAS 112).