CGS Datacenter Achieves SAS 70 Type II Certification
Early in 2011 CGS datacenters in Edison, NJ completed the auditing process necessary to achieve SAS 70 Type II certification. Our main datacenter has received this audit certification from independent auditing firm The Moore Group, CPA. SAS 70 certification is an internationally-recognized standard which reviews all levels of technology service providers over a six-month period for business practices, communication, internal procedures, and security.
The Moore Group, based in Nashua, NH, is a premier CPA and independent auditing firm which specializes in SAS 70 audits for technology providers. Statement on Auditing Standards (SAS) 70 is an auditing standard created by the American Institute of Certified Public Accountants that applies specifically to service organizations. SAS 70 is also a field audit, and for the Type II review, the Moore Group auditors spent six months, November 2010 through May 2011, on-site at the datacenter. Auditors went through almost 190 different control and policy areas, from physical security to accounting practices.
About SAS 70 Certification
The internationally recognized Statement on Auditing Standards (SAS) No.70, Service Organizations, was developed by the American Institute of Certified Public Accountants (AICPA). SAS 70 provides a uniform reporting format that allows service organizations to disclose their control activities and processes to their customers and their customers’ auditors. In a SAS 70 examination, an independent accounting and auditing firm conducts an in-depth audit to ensure that a service provider offers adequate controls and safeguards for the critical task of hosting and/or processing data belonging to its customers. SAS 70 Certification addresses all five components of internal control outlined in Section 404 of the Sarbanes-Oxley (SOX) Act of 2002, and demonstrates that the service provider has established effectively designed control objectives and control activities.
The service auditor’s report, which includes the service auditor’s opinion, is issued to the service organization at the conclusion of a SAS 70 examination. For more information regarding SAS 70 auditing, please visit the SAS 70 website.
