SAS70 Reports on Internet? 1789
Netmation last edited by
Is there a place on the Internet where SAS70 reports are made public or do you have to find the right person in each company to obtain the most recent report? Mainly for popular web service providers of financial impacting systems I am interested in.
Denis last edited by
SAS 70 reports are not normally public documents.
Chhaava last edited by
Some third parties ask for a non disclosure undertaking before they release their SAS-70 to their clients.
lekatis last edited by
I absolutely agree with Denis.
It reminds me a project with a Business Continuity Plan that some employees involved wanted to upload it to the company’s web site because ‘in the Internet you can not lose it’.
Confidntiality is always a major problem.
e0jrodriguez last edited by
Audit firms include a confidentiality statement on their reports, where the information cannot be publicly disclousured.
As far as I understand your question is focused in how could you get comfort that your service provider has a SAS70 report? If that is the question, you will have to ask for it to your service provider: