As more businesses outsource IT to third-party services, data privacy and integrity are paramount to the success of your operations. The SaaS small and medium businesses have a responsibility to ensure your data is processed correctly and that it is kept safe. SAS 70 audits are requirement.
Before outsourcing to save funds, make sure you have a defined plan. Without it, one small security breach of a politicians’ social security number can destroy your company reputation and your ability to generate new business. This plan should included:
1)definitions related to service levels. You will require your vendor to have uptime of at least 99%.
2) the ability to process your information quickly. Customers accesses your company website and purchasing items should occur relatively fast.
3) reporting functions which allow you monitoring capability and to capture your data and analyze.
4) a Disaster Recovery plan, a single hardware failure can result in the loss of business.