StatPro North America Successfully completes
SAS70 Type I Audit
In 2009, StatPro North America successfully
completed a SAS 70 Type I audit of our hosted software suite and
market data provision services. During this audit we
underwent a review of our control objectives and activities to
ensure that the proper safeguards are in place for hosting or
processing data that belongs to our customers. A Type I audit
involved the auditor evaluating our defined and documented controls
and procedures, on a selected single business day, as they related
to our hosted services.
Since completing the Type I audit, we have
undergone significant changes in our hosted environment, most
specifically around the addition of a large number of clients and
move to a new Data Center.
In 2011, StatPro will undergo a Statement on
Standards for Attestation Engagements (SSAE) No. 16, audit (which
is a new North American standard that replaces SAS 70 Type II
audits as of June 15th, 2011). This audit will
evaluate StatPro's documented control activities and procedures
over a 6 month period January, 1, 2011 to June 30, 2011.
The scope of the Type II audit includes:
- Physical and Environmental
Security
- Backup and Recovery
- Processing and Scheduling
- OS, DB, network and application
security
- Change Management
- Data Transmissions
Processing
Undertaking a SSAE 16 audit represents
StatPro’s continued commitment to evaluating and improving our
hosted clients’ data and software control environment. It is
our hope that the extensive SSAE No. 16 audit assures our clients
that the timely, business critical services that we provide are
governed and in compliance with the guidelines defined by the
audit.
Further information on these audits can be
found at: http://ssae16.com/SSAE16_overview.html
Should you require any further info regarding
StatPro North America’s Audit, don’t hesitate to ask!
Previous Next
