AIS is able to provide support for almost any customer compliance standard. AIS itself is SAS 70 Type II reported and is currently working on the following reports for the 2011 calendar year:
SSAE 16 – SOC 1 Type II
A controls report issued per the American Institute of Certified Public Accountants Statement on Standards for Attestation Engagements #16 – Service Organization Controls 1. Considered the exact replacement for the SAS 70 report on financial services controls.
AT 101 – SOC 2 Type II
A controls report issued per the American Institute of Certified Public Accountants AT Section 101 “Reporting on Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality or Privacy” (AICPA). Considered the replacement for how the SAS 70 reports have actually been used as regards datacenter assurance since 1992.
HIPAA
A controls report issued to assure compliance with the Health Insurance Portability and Accountability Act, including Subtitle D of the Health Information Technology for Economic and Clinical Health Act (HITECH), addressing privacy and security of electronically retained patient health information.
ISAE 3402 Type II
A controls report issued per the International Federation of Accountants International Standard on Assurance Engagements #3402, providing assurance of controls for service organizations regarding process, security, privacy and availability.
Our compliance staff is available to work with clients to assist with the relevant parts of AIS controls which need to be applied to client’s compliances. AIS currently supports client’s compliances to:
- PCI-DSS
- FISMA
- ISO 27002
- SSAE 16 – SOC 1
- AT 101 – SOC 2
- ISAE 3402
- HIPAA
- HITECH
- GLP, GMP & GCP