Saturday, May 23, 2009

SAS70 Certification

Q. Why is SAS70 Type 2 Certification Important (http://en.wikipedia.org/wiki/SAS70)

A. SAS70 indicates professional standards have been used by a service auditor to assess the internal controls of the service organization. In a practical use case scenario, when you are audited, if your service provider is NOT SAS70, you will then have to pay your auditors the roughly $10k to audit each service provider. 

Net/net - SAS70 Type 2 in conjunction with PCI Compliance are the highest standards you will want to see for a service provider in the Billing, Virtual Storefront & Customer Life Cycle Management fields.
All the best
Jamy

0 comments: