With the SAS 70 type of audit, that’s been around since the early 1990s, being retired this year, AIS is proactively seeking the SSAE 16 Type 2 (Statement on Standards for Attestation Engagements #16, Type 2) audit for its data centers.  This stringent audit will enable potential clients to have an even higher level of assurance that we have the appropriate controls in place.”

The goal of the audit is to provide assurance (via report) that controls asserted actually exist and are functioning properly. The AIS controls matrix covers all aspects of the business, including: Service Delivery, Solutions Design, Computer Operations, Logical and Physical Security, Change Management, Incident Management and Disaster Recovery / Business Continuity Planning.

A key requirement of the SSAE 16 is an attestation engagement, where AIS management provides to the auditor a written assertion regarding the controls designs, objectives and implementation. The auditor, in turn, verifies the proper controls are in place and that they are functioning properly for the length of the sampling period.