Data Center Control Standards. The Statement on Standards for Attestation Engagements (“SSAE”) 16 or SSAE 18 is a set of auditing standards and guidance on using the standards, published by the Auditing Standards Board (“ASB”) of the American Institute of Certified Public Accountants (“AICPA”), for redefining and updating how service companies report on compliance controls. An SSAE 16 or SSAE 18 compliance assessment must be completed and an SSAE 16 or SSAE 18 compliance assessment report(s) must be issued before the commencement of services for each data center to be utilized and/or hosted by VENDOR or by one of VENDOR’s subcontractors in the performance of this Agreement. A copy of each SSAE 16 or SSAE 18 compliance assessment report(s) shall be provided to SBBC within ten (10) calendar days after the Effective Date of this Agreement and before the commencement of services by the VENDOR or by any of VENDOR’s subcontractors. Each data center utilized and/or hosted by VENDOR or one of VENDOR’s subcontractors in the performance of this Agreement shall have and maintain a current SSAE 16 or SSAE 18 certification. Each data center utilized and/or hosted by VENDOR or by one of VENDOR’s subcontractors in the performance of this Agreement thereafter must, at minimum, annually complete an SSAE 16 or SSAE 18 compliance assessment and maintain SSAE 16 or SSAE 18 certification. The resulting annual SSAE 16 or SSAE 18 compliance assessment report(s) shall be provided by VENDOR to SBBC throughout the term of the Agreement and within ten (10) calendar days after its/their receipt by the VENDOR or the VENDOR’s subcontractors. Along with the two types of audits, the copies of the SSAE 16 or SSAE 18 compliance assessment reports provided to SBBC shall include any completed Service Organization Control (“SOC”) reports including (a) SOC 1 reports containing internal controls over financial reporting; (b) SOC 2 reports covering security, processing integrity, privacy controls, confidentiality and availability; and/or (c) the final SOC 3 report. SBBC is unable to execute a nondisclosure agreement (“NDA”) for its receipt of any such reports. However, any information or documents provided to SBBC by the VENDOR or any of its subcontractors that is clearly labeled as “Confidential and Exempt from Public Inspection as a Trade Secret pursuant to Section 812.081(1)(f), Florida Statutes” will only be viewed by such SBBC personnel as is necessary and will not be made available for public inspection or copying pursu...
Data Center Control Standards. The Statement on Standards for Attestation Engagements (“SSAE”) 16 or SSAE 18 is a set of auditing standards and guidance on using the standards, published by the Auditing Standards Board (“ASB”) of the American Institute of Certified Public Accountants (“AICPA”), for redefining and updating how service companies report on compliance controls.
Data Center Control Standards. (a) 18 is a set of auditing standards and guidance on using the standards, published by the Auditing for redefining and updating how service companies report on compliance controls.
Data Center Control Standards. (a) The Statement on Standards for Attestation 18 is a set of auditing standards and guidance on using the standards, published by the Auditing for redefining and updating how service companies report on compliance controls.
