April 21, 2007; 02:35 AM
Data393, a leading Colorado managed IT infrastructure provider,
announced that it has completed for the second year in a row SAS 70 Type
II audit certification of process controls by an independent,
third-party accounting firm.
With the completion of the SAS 70 Type II examinations, Data393 can help
Internet colocation and managed hosting customers address their control
requirements over the processing of financial data and other sensitive
company information under Sarbanes-Oxley Section 404 (SOX 404). SAS 70
certification enables Data393 to provide confidence among its customers
and to further expand into the enterprise market by delivering
certification of the controls needed for compliance with Sarbanes-Oxley.
“SAS 70 Type II certification is a solid
confirmation of the effectiveness of Data393's processes and controls,"
says Erik Porter, co-founder and vice president of Sales at Data393.
"Data393 has invested millions of dollars in data center upgrades to
ensure our clients that we are the most dependable IT service provider
in the markets we serve. This certification validates our investments in
developing customizable solutions and an always-on facility operated by
a team of experts focused on customer service.”
SAS 70 is an auditing standard developed by the American Institute of
Certified Public Accountants (AICPA) and is the guidance by which
service organizations can disclose their control activities and
processes to their customers in a uniform format. A SAS 70 report is
often used by customers and customers' external auditors to meet the
requirements of section 404 of the Sarbanes-Oxley Act of 2002. Data393's
audit evaluated controls related to service delivery and operations,
infrastructure maintenance, customer implementation, change management,
backup of programs and data files, and logical and physical data center
access.