SAS70 Certification

Q. Why is SAS70 Type 2 Certification Important (http://en.wikipedia.org/wiki/SAS70)

A. SAS70 indicates professional standards have been used by a service auditor to assess the internal controls of the service organisation.

In a practical use case scenario, when you are audited, if your service provider is NOT SAS70, you will then have to pay your auditors the roughly $10k to audit each service provider.

Net/net - SAS70 Type 2 in conjunction with PCI Compliance are the highest standards you will want to see for a service provider in the Billing, Virtual Storefront & Customer Life Cycle Management fields.

Comments

PCI Compliance - Cheat Sheet

A bit of background regarding PCI compliance - as credit card use has become more widespread both offline and online, and as consumer concern about security has understandably grown, the credit card industries have made an effort to ensure that sensitive information is protected. To that end, in September 2006, the major credit card companies (American Express, Discover Financial Services, JCB, MasterCard Worldwide and Visa International) formed the PCI Security Standards Council (SSC) and established a set of rules for what they called PCI compliance. These rules have to be followed depending on the size of a business and the number of credit card transactions handled, and if done properly will help protect consumers’ data from theft. The Rules in a Nutshell There are six major categories within the standards established by the PCI SSC, which are as follows: –Build and maintain a secure network –Protect cardholder data –Maintain a vulnerability management program –Implement strong ...

Italian Baseball | Arriving (VERONA, ITALY)

ARRIVING IN VERONA, ITALY to PLAY BASEBALL On the train from Milano to Verona I found myself being suddenly freaked out. My family-heritage-enthusiasm was starting to leave me...and self doubt started to pop up. In moments like this...and in my lifetime I had plenty...I did what I was taught to do on the baseball diamond...stick to the fundamentals and don't try to do too much! So I took a deep breath and kept thinking to myself, 'one thing at a time...and the first thing is to get rid of this HUGE, unwieldy, ridiculously heaving duffel bag!' There are two things everyone should know about Italian train stations: Left Luggage - you can leave your bags with them, thus unburdening yourself for a small fee. Buses - there are lots of buses outside of train stations and if you take Bus #1, it will take you to Il Centro (the center) of town. So with this knowledge I rented one of their changing rooms for 30 minutes...took a shower and sorted through what I needed to begin my que...

Advertising does not work on me...

I don't buy things from 'da man!' A commercial, billboard, bumper sticker, banner ad, paid or sponsored link has never recommended a darn thing that I have bought. I do not trust marketing...I trust my friends! Friends tell the truth...and mass marketing is often over-hyped lies. If you do not believe me, as any marketing exec who finds herself at a company with poor product development...and lasts about fourteen [14] months in the job. As my baseball coach used to say, "you can not polish a turd." While a bit harsh..true. I do not subscribe to the marketing theory that impressions + lots of them = buying stuff. I know this is not a nice thing to say, as I do not wish to offend or make redundant marketing execs with fancy lexicons that sound like cotton candy to me. It is a simple fact for me and most everyone I talk to. I buy things because my friends tell me they recommend them OR there's a fairly low risk way to try something [signing up for newsl...

gaming > tech stuff > and baseball

Search This Blog