March 2006EC Power Successfully Completes SAS 70 - Report Validates Company's Internal Controls
HOUSTON--(BUSINESS WIRE)--March 15, 2006 EC Power announces that it has recently completed a service auditor's review, commonly known as a SAS 70 audit, of its controls supporting the Electronic Transaction Processing Services. The examination was performed in accordance with standards established by the American Institute of Certified Public Accountants (AICPA) and was completed January 2006.
SAS 70 is an internationally recognized auditing standard developed by the AICPA and is widely recognized because it represents that a service organization has been through an in-depth audit of their control activities. Service Providers must be able to demonstrate that they have adequate controls and safeguards when they host or process data belonging to their customers.
In order to complete the audit, EC Power's management developed control objectives for the significant areas of internal processes that support the general controls for Electronic Transaction Processing Services. The control objectives in the 2006 report addressed each of the following:
¤ Information Security
¤ Application Development, Maintenance and Documentation
¤ Computer Operations
¤ Data Communications
¤ Disaster Recovery
EC Power's service auditor performed extensive testing of the control activities that have been implemented by EC Power to ensure that these objectives are met.
Chief Technology Officer, Cade Burks, states, "The successful completion of the SAS 70 audit demonstrates to our clients that EC Power meets or exceeds standards on class policies and procedures in place for facilities, security, change control, disaster recovery and many other operational areas."