CT Announces SAS 70 Type II Certification
Offers Objective Verification that CT Uses Proper Safeguards for Data Processing
NEW YORK CITY— August 22, 2007— Today, CT, a Wolters Kluwer business, announces that it has received Statement on Auditing Standards No. 70 (SAS 70) certification for its customer and enterprise applications. This audit provides independent verification that CT’s data controls are in place and operating effectively, giving customers additional confidence in CT’s services.
McGladrey & Pullen, LLP, a leading national CPA firm, conducted the SAS 70 audit earlier this year. SAS 70 is a nationally recognized auditing standard developed by the American Institute of Certified Public Accountants (AICPA). A service auditor's examination performed in accordance with SAS 70 proves that an organization has been through an in-depth audit of its control objectives and control activities, which often include controls over information technology and related processes.
CT’s SAS 70 certification assures customers that it has adequate controls and safeguards in place for hosting and processing their data. SAS 70 is also a critical component of ensuring Sarbanes-Oxley Act compliance. The Act specifies SAS 70 as the only acceptable method of gaining third-party assurance regarding the controls at a service organization.
“Our customers need to trust that their information is properly handled. SAS 70 certification was a top priority for us to ensure they can have the utmost confidence in CT’s services and products,” said CT Chief Technology Officer Chris Jutkiewicz. “CT is committed to maintaining this high standard on an ongoing basis.”
The audit was conducted through careful review of CT’s transaction, security and data integrity processes and procedures, which were examined for relevance and tested for compliance. Its registered agent services, hCue, CTAdvantage.com and supporting internal enterprise systems were all part of the audit process.
Specific CT IT best practices measured during the SAS 70 audit included:
- Controls managing application development and testing, application monitoring and authorization
- Control of systems software changes, physical and logical security access, financial systems user permissions, business continuity best practices, security incident response, and encryption of sensitive customer data
Customers can request the service auditor’s report from CT to review more specific information regarding CT’s controls and safeguards. CT TyMetrix and UCC Direct are currently undergoing their own SAS 70 certification processes.
About CT
CT, a Wolters Kluwer business, provides intelligent software and service solutions that empower legal professionals to more effectively manage dynamic information, speed workflows and make critical decisions. CT is the market leader for corporate compliance and governance services and solutions, including solutions for managing statutory representation, corporate transactions, and jurisdictional and securities compliance; UCC products and services for corporate due diligence, secured lending, bankruptcy, and real estate, among other areas; matter management and e-billing applications, litigation support software, and electronic discovery; and innovative trademark research offerings. CT is based in New York City. For more information, please visit www.ctlegalsolutions.com.
Contact:
Stacy Nobles
Sr. Manager, Corporate Communications
CT & Wolters Kluwer Corporate Legal Services
1 (212) 590-9058
stacy.nobles@wolterskluwer.com