SSAE16, or maybe not…?
By Jon Greaves on Feb 03, 2012.
As we were finalizing our own compliance reports this past period, I watched with interest as many hosting companies and auditors rushed to issue or claim they had SSAE16-SOC2. What’s wrong with a SSAE16-SOC2? Well, for starters, it doesn’t exist. In layman's terms, SSAE16 comes in a couple of flavors, but was designed much like the original SAS70 to show controls in support of financial audits and not designed at all for data center operations.