AICPA Cloud Computing Controls Endorsed by Security Group
February 25, 2013
Grazed from CPA Practical Advistor. Author: Editorial Staff.
The American Institute of CPA’s framework for evaluating technology-related controls and other safeguards used by cloud service providers has been endorsed by the Cloud Security Alliance (CSA), a not-for-profit organization that promotes the use of best practices on security assurance within cloud computing.
The AICPA’s reporting framework, known as Service Organization Control Reports, was developed in 2011 and consists of three major document types. The first – the SOC 1 report – deals with controls over financial reporting, and replaces the widely used SAS 70 report…
The SOC 2 report, meanwhile, focuses on controls that bear on a service provider’s security, processing integrity and operating availability, as well as the confidentiality and privacy of data moving through its systems. A third report, SOC 3, is a compressed version of the SOC 2 and is designed for public distribution…
Read more from the source @ http://www.cpapracticeadvisor.com/news/10884193/aicpa-cloud-computing-controls-endorsed-by-security-group