Reports, Certifications and Audits - What do they all mean?
At INetU, we take our financial reporting and security measures very seriously. That's why we have had the following audits and certifications:
- SSAE 16 (replaces SAS 70)
- ISAE 3402
- SOC 1
- SOC 2
- SOC 3
- PCI Visa Certification
- Safe Harbor Compliant
The first three items (SAS 70, SSAE 16, and SOC 1) are very similar and are audits on the financial reporting and controls of an organization:
SSAE 16 replaced SAS 70. SSAE 16 (Statement on Standards for Attestation Engagements) is also separated into Type I and Type II, with definitions similar to SAS 70. The main difference is that the SSAE 16 reporting methodology
requires that the organization's leadership signs an “Attestation” verifying the existence and effectiveness of the organization's financial practices. INetU has SSAE 16 Type II and ISAE 3402 (its international equivalent).
In the web hosting industry, a more granular view of an organization is needed to demonstrate not only sound financial practices, but other relevant business practices, as well. This is the purpose of SOC Reports (Service Organization Control).
SOC 1 and SSAE 16 are the same in terms of what they report on and measure. Both have Type I that reports on the controls that are in place, and Type II that measures the effectiveness of those controls. INetU has SOC 1 Type II.
SOC 2 measures and reports on the best practices that are most relevant to the organization's operations being measured and can be one or more of the following categories: Security, Availability, Processing Integrity, Confidentiality, or Privacy. INetU has SOC 2
SOC 3 is a third-party certification that verifies the SOC 2 was completed and summarizes the contents of that report for public consumption. INetU has SOC 3.
While this list is impressive, we won't just stop here; we will add as many certifications as needed to maintain a high level of trust with our clients. If you'd like more information about our audits and certifications, please complete the form on the right or call us at 1.610.266.7441.