Independently Audited
The policies, procedures and systems utilized by the engineering and support staff of LightEdge Solutions have been carefully reviewed by a representative of Grant Thornton, LLP, one of six global accounting, tax and business advisory companies. Grant Thornton’s SAS 70 auditing services provide truly independent, objective analysis and reporting on the design, implementation and operating effectiveness of the controls and processes utilized within an organization.

Experienced professionals have evaluated and described the control environment including the control objectives and key controls that have been put into place. Certification through Grant Thornton, LLP ensures that processes and controls put in place by the organization are within the standards established by the American Institute of Certified Public Accountants (AICPA).

What is SAS 70?
SAS 70 (Statement on Auditing Standards No. 70) is an internationally recognized auditing standard developed by the American Institute of Certified Public Accountants. A SAS 70 audit is widely recognized, because it ensures a service organization has been through an in-depth audit of their control activities, which generally includes controls over information technology and related processes.

In cases where data is regulated and/or sensitive (HIPAA, Sarbanes-Oxley, etc) it is important for hosting organizations to have detailed and well documented controls in place to ensure the safety and privacy of the data being stored and transmitted. A SAS 70 examination signifies that a service organization has had its control objectives and activities examined by an independent auditing firm.

What does a SAS-70 Audit cover?
A SAS 70 audit includes the controls and processes involved in storing, handling and transmitting data securely. Controls may include firewall configuration, database access, data transmissions, backup/recovery, and security. Each facility is unique in its composition, service levels and architecture making a SAS 70 audit very sophisticated to administer.

A SAS 70 audit helps companies meet regulatory compliance for:

• HIPAA
• Sarbanes-Oxley
• ISO 17799
• GLB

How will this affect your business?
Whether your business operates under compliance regulations or not, a SAS 70 audit provides an additional layer of accountability related to business controls and processes. Because a SAS 70 audit is voluntary, it establishes a high level of commitment by your service provider to set, review and test the activities of the facility to ensure the reliability and security of your data.

Businesses regulated by compliance initiatives such as HIPAA and Sarbanes-Oxley may already realize that establishing, documenting and testing processes is an expensive proposition. In the event of a business audit, a company is able to use the established SAS 70 documents as baseline for their regulatory compliance. This allows your business to reduce expenses toward regulatory compliance and streamline any effort that is necessary to complete the regulatory audit.