When choosing colocation or data center services for your organization, there are a multitude of options. One of the most important things to consider is a data center with SAS 70 Type II compliance.
What is SAS 70 Compliance?
The most widely accepted auditing standard for service organizations is Statement on Auditing Standards (SAS) No. 70. It was developed by the American Institute of Certified Public Accountants and certifies the functionality and security of the control objectives and activities of a service organization.
SAS 70 Type II compliance is particularly important for auditing controls in information technology. Colocation and data centers may house some of your organization's most sensitive information.
Any data center you trust with your data hosting, infrastructure or other data services should be SAS 70 Type II compliant. Here are three reasons why:
1. Differentiate the Top Notch Data Centers
With the overwhelming options in data centers and colocation for your business, the first way to separate the great from sub-par providers, is to look for SAS 70 Type II compliance.
This means the organization has had its control policies evaluated any tested by an independent, 3rd party auditor. SAS 70 is the authoritative mark disclosing control activities and processes to you, the customer.
As for data facilities without SAS 70 compliance, you cannot be sure their control processes will meet your standards, or the standards of your auditors. This easily allows you to narrow down your colocation options.
2. Rest Easy, Your Data Is Secure
Your data is important. There should be no better reason for selecting a data or colocation center with SAS 70 type II compliance. The controls and processes in place can seriously affect the security of your information.
By selecting a provider that is SAS 70 Type II compliant, you have independently verified documentation of those processes and their effectiveness. When your data is part of the equation, make sure it is not in the hands of an unverified data center.
3. Save Time and Money on Audits
When it comes time for your organization to be audited, the process can be made much simpler by working with a colocation or data facility that is SAS 70 Type II compliant.
If your data center is SAS 70 compliant, they can provide a Service Auditor's Report directly to your auditor. This will be an immense advantage to you and your auditor. Without SAS 70 compliance from your data facility, you may end up covering the additional cost of sending your auditor to that service organization.
In the end, both time and money will be saved during the auditing process. By selecting a data or colocation center that is already SAS 70 Type II compliant, both you and your auditor's jobs will be made easier.
When weighing your options in the selection of a colocation or data center, look for SAS 70 Type II compliance. Any service provider that is compliant will be able to provide you with documentation of compliancy.