At the end of February, leading San Francisco collocation and managed service provider, ServePath, announced it had received the SAS 70 Type II report, an internationally recognized auditing standard developed by the American Institute of Certified Public Accountants (AICPA). Performed by a major public accounting and auditing firm, the SAS 70 is an independent report on the design of ServePath's business processes.
"ServePath obtained the SAS 70 report to demonstrate to regulated and security conscious companies that we have internal controls and procedures related to our data center operations and services," said John Keagy, president, ServePath. "The SAS 70 Type II report is valuable to our customers because they can provide it to their clientele as required to prove the security of their data."
The SAS 70 Type II report shows that ServePath's description of certain relevant controls over information technology related to its San Francisco data center and hosting operations is fairly presented and that such controls have been suitably designed to achieve their specified control objectives.
ServePath's controls description is broader in scope than many other leading colocation providers. In addition to the physical security measures covered in a typical colocation facility, ServePath's report covers a gamut of information security, network performance, network monitoring, data back-up, disaster recovery, and other controls such as Service Level Agreements.