ComplianceNow has obtained ISAE 3402 type 2 certification by PwC. We obtained the ISAE 3402 type 1 documentation last year, and we are proud to now have the more advanced certification. You might ask, what is the difference between type I and type II? We will keep it short, but the difference is important:
The main difference is that Type 1 assesses the design of controls at a specific point in time, while Type 2 evaluates the operating effectiveness of controls over a minimum period of six months, which in our case the period was 12 months. Type 1 reports are useful for gaining an understanding of the control environment, while Type 2 reports provide greater assurance that the controls are not only designed appropriately but are also operating effectively over time.
But what does this mean for you as a partner, customer, or otherwise interested stakeholder?
Well, simply put an ISAE 3402 type II certification is an assurance to customers and stakeholders that a service organization has implemented effective controls over its services, systems, processes, and data. This is especially important for businesses that provide IT services for other businesses as it demonstrates a robust control environment.
Our ISAE 3402 certification is like a stamp of approval that shows we take the security and protection of your data seriously. It means we’ve gone through a rigorous evaluation process to ensure we have effective controls in place. So, you can feel confident knowing that your data and systems are in good hands with us. At ComplianceNow, we are committed to continuously proving ourselves to our clients and partners. Obtaining and maintaining the ISAE 3402 type 2 certification is just one of the ongoing initiatives we pursue to demonstrate our commitment to effective controls over our services, systems, processes, and data. We are dedicated to achieving this certification on a recurring basis, ensuring that our internal controls are consistently executed and operating effectively.
Additionally, we are committed to the SAP certification program to ensure that our ComplianceNow suite is always up to date with major updates from SAP and undergoes yearly recertification. Although obtaining and maintaining these certifications requires a significant investment of our time, it is well worth it to demonstrate to all stakeholders that ComplianceNow is committed to being a safe and reliable supplier both now and in the future.
If you are interested in reading the full ISAE 3402 report, you are welcome to contact us here:
If you want to look more at our SAP certifications, you can look at the official SAP certification directory here:
Follow us on LinkedIn and get instant access to our latest articles and posts on SAP and compliance.
