But there will be nothing to stop vendors from making exaggerated marketing claims about their SOC 1 and SOC 2 reports, as they have for SAS 70. "The only way that situation will improve substantially is if businesspeople really understand what these new terms mean," says auditor and SAS 70 expert Dan Schroeder. "That will take a strong brand-messaging effort. There's a lot of work to do to turn things around." — D.M.
Most Popular
advertisement
Inside Today in Finance
advertisement
Reader CommentsDisplaying 3 of 4
David Barton
Sep 27, 2010 11:47 AM ET
Type I is useless?
Sorry William, but I have to disagree. A Type I SAS 70 report is not useless when it is evaluated properly and in the … more
William Tennison
Sep 8, 2010 9:58 AM ET
SAS 70 reports usefulness
Both Dave and Chris bring up excellent points. A SAS 70 Type 1 report is basically useless for evaluating an … more
David McCann
Sep 1, 2010 1:46 PM ET
Response to Chris
Chris, thank you for your well-stated comments. Let me offer the following observations: -- With regard to Jim … more
Post a comment | View all comments