Third-Party Assurances Help Customers Meet Sarbanes-Oxley and Other Regulatory Requirements
Scottsdale, AZ…November 16, 2005…OneNeck IT Services, a leader in enterprise application hosting solutions, today announced it has completed the Statement of Auditing Standards No. 70 (SAS 70) Type II exam. The SAS 70 Type II assessment provides industry-standard assurances to OneNeck customers using their hosting and application management solutions. It is awarded only after demonstrating effective operational controls and processes over an extended period of time.
SAS 70 Type II assurance signifies that OneNeck’s infrastructure and processes have passed rigorous, third-party testing and have independently validated that processes and controls are in place to effectively manage customer’s corporate and financial information. Many companies who need to comply with the SEC’s Sarbanes–Oxley Act of 2002 require credible proof that service providers have measures in place to provide a stable and secure environment to safely manage customer data. Issued through guidance established by the American Institute of Certified Public Accountants (AICPA), a SAS 70 Type II auditor's report can help provide that proof.
"With completion of our SAS 70 Type II audit, OneNeck customers can be assured that our services are consistent, safe and reliable. Companies using outsourced services should expect their partners to perform to the same standards required of them by government regulation," said Chuck Vermillion, CEO of OneNeck. "OneNeck will continue to pursue annual examinations to ensure our customers and their auditors can rely on our services to satisfy their internal control needs.”
The SAS 70 Type II report contains information needed for OneNeck’s customer’s auditors to thoroughly understand the design and effectiveness of OneNeck's internal controls. The annual detailed examination process, conducted by Grant Thornton, incorporates a review of OneNeck's management functions and procedures, and eight separate operational control objectives including Information and Systems Security, Management Control, Computer Operations, Incident Management, Systems Change Management, Applications Development and Control, Physical Security with respect to Buildings and Environmental Control and Monitoring Devices. In order to obtain similar assurance without a SAS 70 assessment, customers would have to send their own auditors to a service provider to conduct individual reviews. OneNeck’s SAS 70 statement helps customers avoid individual auditing. “The processes tested as part of this audit were built in strict compliance with the Information Technology Infrastructure Library (ITIL),” stated Rob Morel, senior vice president of operations for OneNeck. “ITIL is the defacto standard for best practices in managing information systems. The SAS 70 Type II audit validates our adoption of ITIL.”
About OneNeck:
OneNeck IT Services, Corporation is the leading ERP outsourcing services provider to mid-market manufacturing and distribution companies. OneNeck supports a variety of ERP applications, including SSA Baan, J.D. Edwards and Microsoft Business Solutions’ Axapta and offers a wide range of services including application, database and network management, data center management, 24 x 7 customer support, disaster recovery and desktop support. OneNeck’s global solutions enable customers to improve ERP system performance and leverage their enterprise applications to deliver measurable business benefits. For additional information, visit the OneNeck IT Services home page at www.OneNeck.com.
# # #
|
