Describe SAS 70 Type I and Type II Certifications?
• Type I includes an opinion written by the service auditor. Type I reports describe the degree to which the data center fairly represents its services in regards to the operational controls that have been implemented to meet set objectives. • Type II reports are similar to Type I. However, an additional section is added which includes the service auditor’s opinion on how effectively the controls operated during the defined period (usually six months but can be longer) of the review.