ServerCentral Maintains SAS 70 Type II Audit Certification

In July 2010 ServerCentral completed its most recent SAS 70 Type II audit that covers operations at all ServerCentral data centers worldwide.

A Statement on Auditing Standards (SAS) 70 Type II, officially known as a “Report on Controls Place in Operation and Tests of Operating Effectiveness” or a Type II Service Auditor’s Report, is an independent third party verification by a licensed CPA firm as to whether control activities described by a service organization were suitably designed to meet specified control objectives and were in place and operating effectively.  In a Type II engagement, the service auditor performs the procedures required for a Type I audit and also performs tests of specific controls to evaluate their operating effectiveness in achieving specified control objectives.  The Type II auditor's report deals with the fairness of presentation of the internal controls, the design of the controls with regard to their ability to meet defined control objectives, and the operation effectiveness of those controls over the defined period. Third parties are better able to rely on these reports because a verification is provided regarding these matters for s substantial period of time. (source: sas70cpa.com)

To maintain the certification issued by the American Institute of Certified Public Accountants (AICPA), ServerCentral submits information about its stringent controls over customer data and related processes annually.  This includes interviews with ServerCentral executive leadership, and providing independent auditors access to the company’s data centers, network services operations, systems, and control procedures.

The auditors then issue an annual report regarding the following ServerCentral controls:

• Organization and Administration
• Human Resources Security
• Physical Access
• Environmental Security
• Backup and Recovery
• Computer Operations
• Change Management
• Logical Access
• Secure Storage and Media Destruction
• Disaster Recovery Preparedness
• Support Operations
• Customer Provisioning and Implementation

The auditor’s examination, performed in accordance with standards established by the AICPA, resulted in an opinion that ServerCentral’s controls continue to operate“…with sufficient effectiveness to provide reasonable…assurance that the control objectives…were achieved” during the review period.

“By completing this extensive audit each year, ServerCentral is better able to serve financial, healthcare, government and other organizations that are required to substantiate adequate oversight of their service providers,” said Jordan Lowe, CEO. “It also reinforces ServerCentral’s position among the world’s elite data center operators, and validates to customers our willingness to take exhaustive steps to comprehensively support their business goals.”

Contact ServerCentral at sales@servercentral.com or at 888-875-4804.