Is the cloud provider SAS 70 Type II audited?
A SAS 70 Type II audit for a cloud provider ensures that the defined operational controls are actually complied with in practice. There are some who think that SAS 70 audits are only marginally valuable because the parameters of the audit are actually defined by the vendor. However, in my experience, the SAS 70 Type II audit is a great indicator of the operational maturity of an organization. You do have to look beneath the surface and examine the details of the audit. But as far as I’m concerned, it’s the price of entry for any credible cloud service provider.
