Hubspan Achieves SAS 70 Compliance for 4th Straight Year
Posted by Margaret Dawson on December 14, 2010
This week, we announced the successful completion of our SAS 70 Type 2 audit. With this Certification, Hubspan has maintained SAS 70 compliance for four years running. We are proud of this accomplishment, not only because it is a company-wide initiative that takes discipline and clear processes, but because it is one more reason our customers can be assured they are working with a best-in-class service provider.
The SAS 70 standard (officially known as The Statement on Auditing Standards No. 70, Service Organizations) provides critical guidance in the selection of a service provider, and is a widely recognized benchmark that an organization has been through an in-depth, independent audit of its control activities.
It was developed by the American Institute of Certified Public Accountants (AICPA), and it requires a third-party auditor to review and approve your compliance. As I mentioned above, it spans a wide range of operational areas, including:
- Organization and administration
- Customer implementation and administrations
- Physical and environmental controls
- Logical access controls
- System availability and performance
- Application software development and maintenance
- Infrastructure software development and maintenance
- Backup and maintenance
A small example of our SAS 70 compliance is in our recruiting procedures. For every candidate, interviewers must complete a form evaluating that candidate. Each candidate must be evaluated using the same criteria. When hiring, a prospective employee goes through a mandated series of background checks and at least three references, and reference forms must be completed and submitted to HR, who must maintain these files and be ready to show the auditors. This same level of clear process and control extends cross the company.
By itself, it is an impressive validation of a company’s control mechanisms, but when combined with other compliance mandates, it is truly powerful. In addition to the SAS 70 Type II Certification, Hubspan is PCI DSS compliant and also follows security and data protection guidelines as those outlined by the U.S. Department of Defense, the Open Web Application Security Project (OWASP), the Cloud Security Alliance and others.
With millions of messages traversing our B2B cloud every day for thousands of companies worldwide, security, compliance and control are top of mind at Hubspan. It’s not just marketing speak, either, but defined capability and standards across our technology, people and processes
No Comments »
No comments yet.