Note: This is a guest post by David Barton, of UHY Advisors, one of the largest professional services and accounting firms.  The AICPA has replaced the audit standard known as SSAE 16 with a new standard effective for report dates on or after May 1, 2017. This new standard, known as SSAE 18, is designed to address and clarify concerns over the clarity, length and complexity of the many other AICPA standards. Before we get into the details around the …

Introduced in 2011, Service Organization Control (SOC) reports are becoming more and more popular in data security and compliance discussions with every passing year, especially SOC 2. But what is a SOC report? Which one do you need? Why is a SOC 2 report so important? Do you actually need it, or is it something that just looks good on paper? There are three types of SOC reports, but we’ll mainly talk about the second one for now, which is “designed …

By JASON YAEGER Online Tech Director of Product Management, Risk Management Officer and Security Officer The cost of data loss can be staggering. A study at the University of Texas tells us that 43 percent of companies that experience a catastrophic data loss never reopen, and that another 51 percent close the doors within 10 years. For small- and medium-sized businesses, the cost is even more staggering: 70 percent of companies with fewer than 100 employees that experience a catastrophic …

Co-CEO Yan Ness has a saying that Online Tech is “in the business of helping our clients sleep at night.” Primarily, he’s speaking of organizations not losing sleep worrying about compliance and data security. But at the C-suite level, more and more, protecting data privacy also means protecting careers. On Monday, Target president and CEO Gregg Steinhafel resigned after 35 years with the company. According to a statement from the company’s board of directors, Steinhafel “held himself personally accountable” for …

Our online guides to information security (infosec) and compliance are scattered across our website and blog, but here’s a roundup of our best and most relevant resources that relate to this year’s Detroit SecureWorld security and compliance sessions, tomorrow and Thursday. Online Tech’s Senior Product Architect Steve Aiello will be speaking on a panel discussion tomorrow, October 16, about network security: Industry Expert Panel: Network Security Room: Suite 3 Time: 1:15pm – 2:15pm Description: Network Security is defined as, “the …

Although SAS 70 (Statement on Auditing Standards) has been dead for quite some time now, we’ve found that those lagging in the health IT industry may still be confused about why SAS 70 is no longer the audit to look for when it comes to ensuring security with a cloud hosting provider. In fact, false information about SAS 70 as a qualifier for cloud computing security supporting the healthcare industry is still an issue. Some suggest that SAS 70 is …

Google Analytics is your best friend at year’s end to find the top trending topics of your blog or website – so I thought I’d share a bit of the gold with everyone to help guide them through next year. Ease your data center audit and cloud computing concerns (they can be harrowing, I know) and learn a thing or two from our expertly written and researched articles receiving top hits in 2012: SAS 70, SSAE 16, SOC 2 and …

April Sage, Director of Healthcare Vertical and Marketing discussed recent developments in the risk assurance industry on Risk Assurance Talk Radio with Jon Long, Audit Senior Manager at CompliancePoint. Speaking from the perspective of the first data center operator to achieve a SOC 2 report, April discusses Online Tech’s dedication to audits and the many different types of compliance in order to better serve diverse industry security needs. Listen to a recording of the radio talk show here: Listen to …

Online Tech is attending the Michigan Association of CPAs (MACPA) event Wednesday, June 27 and Thursday, June 28. The Management Information and Business Show is being held in Novi, Michigan at the Suburban Collection Showplace. This two-day conference brings together technology, accounting and auditing, and tax and financial planning professionals. Why is Online Tech exhibiting? Our SOX compliant hosting solutions, including SSAE 16 hosting, SOC 1 hosting, SOC 2 hosting and SOC 3 hosting feature our fully audited and compliant cloud computing, colocation, disaster recovery and managed servers. SOX compliance, or Sarbanes-Oxley, was established …

Online Tech will be attending the Management Information and Business Show two-day event hosted by the Michigan Association of CPAs (MACPA). Held on June 27-28 from 7:30-6 P.M. ET, the conference will be located at the Suburban Collection Showplace in in Novi, Michigan. As the largest accounting trade show in Michigan, this annual conference is a great networking opportunity for technology, accounting and auditing, and tax and financial planning professionals. Industry-specific breakout sessions include talks on the topics of: Accounting …

Get started now. Exceptional service awaits.

Live Chat