Is the software company SAS 70 certified?
SAS 70 certification is for assessing certain service organizations that provide outsourcing services that affect the operation of the contracting party. Examples of service companies who apply for SAS 70 certification include hosted data centers, insurance claims processors, and credit processing companies. SAS 70 is the definition of standards that auditors must use to assess the internal controls of these service organizations. ISVs who maintain sensitive information or in the healthcare or financial services industries will want to investigate whether the hosting company that holds the customer information is SAS 70 certified. Hosting companies who have become SAS 70 certified (either Type I or II) have invested a lot of time and resources and as a result this may be one more factor of why they may be more expensive. Do what you do best. Unless a software company is Google or Salesforce.com, building an internal hosting infrastructure is probably not advisable. Todays data centers
Related Questions
- My company wants to export software services to a USA based company for which the US Based company is asking for an Export Compliance Certificate to USA. What do I need to do?
- How many managers from a company are trained and certified in such one in Training Programme and how many software licenses each enterprise gets?
- Can computer software be SAS 70 "certified"?
