SAS 70 Certification
Switch and Data Has Been Certified as SAS 70 Type I and II Compliant for Colocation and Data Center Services
The SAS 70 audit minimizes the need for multiple sets of auditors to separately examine the same set of controls that govern a third-party's services. "SAS" is an acronym for Statement on Auditing Standards, which are standards issued by the American Institute of Certified Public Accountants. These standards provide guidance to external auditors on Generally Accepted Auditing Standards (GAAS) in regards to auditing an entity and issuing a report. There are more than one hundred such standards in existence.
SAS No. 70 is titled "Reports on the Processing of Transactions by Service Organizations". "SAS 70", as it is commonly known, defines the professional standards used by a service auditor to assess the internal controls of a service organization and issue a service auditor's report, which is referred to as a SAS 70 audit report.
SAS 70 Type I - Report on Controls Placed in Operation
Officially known as a "Report on Controls Placed in Operation" or a "Type 1 Service Auditor's Report", Type 1 SAS 70 audits provide independent third-party verification by a licensed CPA firm as to whether control activities described by a service organization were suitably designed to meet specified control objectives and whether the controls were in place as of a specified review date.
- Date Completed - September 2006
- 4 Facilities audited
- Philadelphia Market St.
- Pittsburgh
- San Jose
- Vienna SAIC
- Process compliant is recognized across all 34 Switch and Data facilities
SAS 70 Type II - Report on Controls Placed in Operation and Tests of Operating Effectiveness
Officially known as a "Report on Controls Placed in Operation and Tests of Operating Effectiveness" or a "Type 2 Service Auditor's Report", Type 2 SAS 70 audits provide independent third-party verification by a licensed CPA firm as to whether control activities described by a service organization were suitably designed to meet specified control objectives and were in place and operating effectively over a period of time that is typically at least a six-month period.
- Date Completed - January 2009
- 3 Facilities audited
- Dallas
- North Bergen
- Sunnyvale
- Tampa (headquarters)
- Date Completed - July 2009
- 1 Facilities audited
- New Jersey
- Process compliant is recognized across the 2 Switch and Data facilities and headquarters only
- Headquarters certification is for customer-facing processes
- Date Completed - January 2010
- 1 Facilities audited
- Toronto
More detailed SAS 70 guidance information is available from the AICPA.
|
|
|