Mainzer Landstrasse 49/49A
60329 Frankfurt am Main, de
+1 (609) 613-4031
EPAM's Multiple Development Locations are Recognized as Meeting the World's Leading Security and Infrastructure Standards
SAS 70 Type II certification completed for the three locations in Central and Eastern Europe, while the outsourcing leader becomes a finalist for the International Business Awards in "Best MIS&IT" category
SAS 70, a Statement on Auditing Standards (SAS) No. 70, Service Organizations, was developed by the American Institute of Certified Public Accountants (AICPA) as a method to measure a service organization's efficiency in providing due controls over sensitive customer data. With the introduction of the Sarbanes-Oxley Act, which defines means of regulating the controls over financial reporting, the Type II SAS 70 report has been identified as the only acceptable method for a third party to assure a service organization's controls and financial transparency. Unlike a Type I report, where the service auditor will express an opinion on controls as of a specific date, in a Type II report the auditor gives an opinion on controls in effect during a particular period of time, making the certification more challenging and meaningful.
Upon the assessment completion, Deloitte's Enterprise Risk Services Senior Manager Ralph van Uden stated that all controls at EPAM's Kyiv location were placed in operation, suitably designed, and operating 100% effectively: "The local EPAM team was well prepared and has been very supportive throughout the week to make sure that we could finish our testing in time... We were pleased to see that all controls in scope were tested to be operating effectively."
As the leading organization, deploying advanced technologies and adhering to the strictest regulatory requirements, EPAM recently completed the beta program for VMware's Stage Manager, a breakthrough product for accelerating and automating the delivery of applications from staging to production. This and other developments, related to EPAM's infrastructure and security, contributed to the most recent recognition of EPAM by the Stevie Awards as the finalist in the "Best MIS and IT Organization" category of the 5th annual International Business Awards, with the runner-up Accenture, and the winner British Telecom Group.
"Deploying the IT infrastructure, that meets the stringent requirements for customer data processing, compliant with the world's leading security and infrastructure standards, is a vital part of EPAM's enterprise-wide program. It ensures that all our operational facilities apply the same control objectives and management activities, and leverages our investment into our clients' competitive advantage," stated Balazs Fejes, EPAM's CTO. "As the acknowledged software engineering and IT outsourcing leader, EPAM continues to lead within the Central and Eastern European market by setting a high standards bar throughout the region, and worldwide."
About the AICPA and SAS No. 70, Service Organizations
The American Institute of Certified Public Accountants is the national, professional association of CPAs, with more than 350,000 CPA members in business and industry, public practice, government, education, student affiliates, and international associates. It sets ethical standards for the profession and U.S. auditing standards for audits of private companies, non-profit organizations, federal, state and local governments. It develops and grades the Uniform CPA Examination. The AICPA maintains offices in New York, Washington, Durham, N.C., Ewing, N.J., and Lewisville, Texas.
SAS No. 70, developed by AICPA, provides guidance on the factors an independent auditor should consider when auditing the financial statements of an entity that uses a service organization to process certain transactions. It also provides guidance for independent auditors who issue reports on the processing of transactions by a service organization for use by other auditors.
The use of information published here for personal information and editorial processing is generally free of charge. Please clarify any copyright issues with the stated publisher before further use. In the event of publication, please send a specimen copy to firstname.lastname@example.org.