Businessolver Issue SAS 70, Type II Audit Report
Businessolver has issued a Type II SAS 70 report that provides an opinion on the fairness of presentation on the description of controls and whether the controls were operating effectively to achieve the control objectives during the reporting period.
West Des Moines, IA, May 18, 2011 --(PR.com)-- Businessolver has issued a Type II SAS 70 report. This report provides an opinion on the fairness of presentation on the description of controls and whether the controls were operating effectively to achieve the control objectives during the reporting period.
“Type I is a snapshot point in time; Type II is over a timeframe, usually six months,” explains Loras Even, managing director with the technology risk advisory services group at McGladrey Pullen LLP. Businessolver’s SAS opinion within the report was provided by McGladrey in April.
“I think it’s import to make this distinction,” says Ryan Keehn, Businessolver Information Security Officer. “A Type I report is much easier to get in place and make sure that everything looks good for the auditor at that point in time. A Type II report is much more difficult because we are requiring the auditor to look at the entire period of time when the controls were in place. The Type II report helps to show consistency and lets our customers see what they can expect over the long run.”
Keehn says having this report validates what the Businessolver team members have known for a while: Businessolver is committed to keeping our customer’s information secure. “We have worked very hard to put the processes and procedures in place to meet this commitment, and we are happy to showcase some of these processes within the report.”
When examining a report, Even says to look for an unqualified opinion. “If you have a qualified opinion, that means there is an area that needs to be fixed.”
The Businessolver report was issued with an unqualified opinion. Beyond a qualification, Keehn explains, SAS 70 reports can also include exceptions which may not always lead to a qualification. Many of the reports that are issued include exceptions which show that service organization may not be consistent throughout the period. “Businessolver is also happy to note that the report did not include any exceptions,” Keehn says.
But just issuing a report doesn’t necessarily give an organization the “all clear.”
“Read the controls and determine whether they are important to the application,” Even continues. “You really need to look at the controls and dig a little deeper.”
Keehn says, “The report in and of itself is definitely just one aspect of the entire picture. SAS 70 reports can include a number of different types of information, and companies may use their client’s lack of understanding on the subject to leave out key pieces of information that may be of value to their customers. Businessolver has listened to its customers and included the information that our customers have identified as most important to their organizations.”
About Businessolver
Businessolver is a provider of online benefits administration services and benefit administration outsourcing services. Its web-based platform automates employers’ insurance benefit administration by consolidating multiple insurance carriers into a single platform and customizing the process to meet each employer’s unique enrollment requirements. In addition to Enrollment and Eligibility services, other Businessolver service offerings include: COBRA Administration, Billing and Financial Reporting, Service Center, Benefit Advisory Services, Eligibility Verification and Fulfillment. For more information about Businessolver please go to www.businessolver.com.
###
“Type I is a snapshot point in time; Type II is over a timeframe, usually six months,” explains Loras Even, managing director with the technology risk advisory services group at McGladrey Pullen LLP. Businessolver’s SAS opinion within the report was provided by McGladrey in April.
“I think it’s import to make this distinction,” says Ryan Keehn, Businessolver Information Security Officer. “A Type I report is much easier to get in place and make sure that everything looks good for the auditor at that point in time. A Type II report is much more difficult because we are requiring the auditor to look at the entire period of time when the controls were in place. The Type II report helps to show consistency and lets our customers see what they can expect over the long run.”
Keehn says having this report validates what the Businessolver team members have known for a while: Businessolver is committed to keeping our customer’s information secure. “We have worked very hard to put the processes and procedures in place to meet this commitment, and we are happy to showcase some of these processes within the report.”
When examining a report, Even says to look for an unqualified opinion. “If you have a qualified opinion, that means there is an area that needs to be fixed.”
The Businessolver report was issued with an unqualified opinion. Beyond a qualification, Keehn explains, SAS 70 reports can also include exceptions which may not always lead to a qualification. Many of the reports that are issued include exceptions which show that service organization may not be consistent throughout the period. “Businessolver is also happy to note that the report did not include any exceptions,” Keehn says.
But just issuing a report doesn’t necessarily give an organization the “all clear.”
“Read the controls and determine whether they are important to the application,” Even continues. “You really need to look at the controls and dig a little deeper.”
Keehn says, “The report in and of itself is definitely just one aspect of the entire picture. SAS 70 reports can include a number of different types of information, and companies may use their client’s lack of understanding on the subject to leave out key pieces of information that may be of value to their customers. Businessolver has listened to its customers and included the information that our customers have identified as most important to their organizations.”
About Businessolver
Businessolver is a provider of online benefits administration services and benefit administration outsourcing services. Its web-based platform automates employers’ insurance benefit administration by consolidating multiple insurance carriers into a single platform and customizing the process to meet each employer’s unique enrollment requirements. In addition to Enrollment and Eligibility services, other Businessolver service offerings include: COBRA Administration, Billing and Financial Reporting, Service Center, Benefit Advisory Services, Eligibility Verification and Fulfillment. For more information about Businessolver please go to www.businessolver.com.
###
Contact
Businessolver, Inc.
Brian Weber
888.460.9625
www.businessolver.com
Brian Weber
888.460.9625
www.businessolver.com
Contact
Categories