QOTD on SAS-70

Given that SAS 70 cannot be considered as proof that an offered IT service is secure, it should be a matter of suspicion when a vendor insists that it is.
-- Jay Heiser, Research Vice President at Gartner, Inc

Src: SAS 70 is not proof of security, continuity or privacy compliance: Gartner

No comments: