Why are you still being asked for a SAS 70 on RFPs?

Wednesday, December 14, 2011 by Robert Brenis CGEIT, CISA, CRISC, PMP

Because the people asking do not know about the changes that have been made.

On June 15, 2011, SAS 70s were broken into two different standards. A new standard (SSAE 16) and an existing standard (AT 101).

SAS 70 Replacement, SOC 1, SOC 2, SOC 3, AT101, SSAE16

These two different standards are used for two different reasons:

The SSAE 16 focuses on controls at service organizations likely to be relevant to user entities’ internal control over financial reporting.

The AT 101 focuses on controls that do NOT affect its clients’ internal control over...Read More >>

Is Your Customer’s Information Secure?

Monday, April 4, 2011 by Robert Brenis CGEIT, CISA, CRISC, PMP

Over the weekend, a security breach at Epsilon, an online marketing unit of Alliance Data Systems Corp., exposed millions of people to phishing attacks. Epsilon’s customers include well-known and large companies such as Citigroup Inc., Capital One Financial Corp., JPMorgan Chase & Co., U.S. Bank, Barclays Bank, Ameriprise Financial Inc., Walgreens, Kroger Co., New York & Co., Verizon Communications Inc., TiVo Inc., the Home Shopping Network, Hilton Hotels, Best Buy, Disney Destinations, Kraft...

Read More >>

Microsoft Announces Three Offers for its Microsoft Dynamics ERP Systems (GP, NAV, BE, AM)

Wednesday, March 16, 2011 by Robert Brenis CGEIT, CISA, CRISC, PMP

Microsoft has recently announced three offers for its Microsoft Dynamics ERP systems, valid from now until June 24, 2011.

 

New Microsoft Dynamics Customers

With the “Buy 1, Get 3” offer, growing and medium-sized businesses can take advantage of the rich functionality, low cost of ownership, and rapid deployment offered by Microsoft Dynamics NAV and Microsoft Dynamics GP. This promotion allows a customer purchasing either the Advanced Management (AM) or Business Essential (BE) Foundation Pack...

Read More >>

IT E-Newsletter - Fall 2010

Tuesday, October 26, 2010 by Robert Brenis CGEIT, CISA, CRISC, PMP


Mainstream Support for Microsoft Dynamics GP 9.0 will End January 11, 2011

Mainstream support for Microsoft Dynamics GP 9.0 will end on January 11, 2011 per the Microsoft Support Lifecycle Policy. Click here to find out when your GP product's support ends.

Green Tip: Download Your Software

Instead of shopping for software at the store, simply download what you need directly from those clever folks on the Internet. You'll save resources, as well as time and fuel.  CDs are made out of nonrenewable...

Read More >>

Frequently Asked Questions about SAS 70 Audits

Monday, July 5, 2010 by Robert Brenis CGEIT, CISA, CRISC, PMP

When companies receive a request for a SAS 70 audit, their first question is often, “What is this, and why am I being asked for it?”

A SAS 70 audit (statement of auditing standards no. 70) is one function of auditing that assesses the internal controls of a service organization. When a service organization has access to important information, such as employee banking information, social security numbers, etc., it needs to be determined that the manner in which this information is stored and...

Read More >>

Frequently Asked Information Technology Questions

Monday, June 21, 2010 by Robert Brenis CGEIT, CISA, CRISC, PMP

CPAs are increasingly being asked to solve the information technology problems of their clients and prospective clients, according to a new survey by the American Institute of CPAs.

This year, the AICPA’s Top Technology Initiatives Survey asked AICPA members to rank a list of questions heard most often from audit committees, chief financial officers and chief information officers. With a renewed focus on IT-related issues, the survey makes it clear that CPAs need to understand information...

Read More >>

SSAE No. 16 to replace SAS 70 in June 2011

Wednesday, May 5, 2010 by Robert Brenis CGEIT, CISA, CRISC, PMP

In June 2011, the SSAE No. 16 will replace the SAS 70 as the standard for reporting on service organizations.

Statement on Standards for Attestation Engagements (SSAE) No. 16

The SSAE No. 16 was finalized by the Auditing Standards Board of the American Institute of Certified Public Acountants (AICPA) in January 2010. It was drafted to replace the SAS 70 as a more effective standard for reporting on service organizations, and to update the US service organization reporting standard so that it fits...

Read More >>

FRx Discontinued; Paves Way for Microsoft's New Business Intelligence Program

Tuesday, March 23, 2010 by Robert Brenis CGEIT, CISA, CRISC, PMP

Microsoft currently offers three Corporate Performance Management (CPM) programs: FRx, Forecaster and Enterprise Reporting, which aid businesses in the areas of financial reporting, planning/budgeting/forecasting, and consolidation. Starting in May 2010, the capabilities of these CPM programs will gradually be combined into one program, Microsoft Dynamics Management Reporter, as part of an integration process that will take place over the next four years.

May 2010 marks the first step of the...

Read More >>

Securing Your Business

Thursday, September 3, 2009 by Robert Brenis CGEIT, CISA, CRISC, PMP

When you read something that says you should secure your network, most business people assume their IT people are taking care of this.  How can you be sure? Answer – you trust them.  Great, but what if they aren’t staying current with technology and are using old techniques…

 

You may trust them, and they may be doing what they know how to do, but you still have vulnerabilities. In a recent article in InformationWeek magazine – Greg Shipley, Tyler Allison, and Tom Wabiszczewicz write about five...

Read More >>

Posting Your Birthday on Social Networks Makes Identity Theft Easier

Thursday, July 16, 2009 by Robert Brenis CGEIT, CISA, CRISC, PMP

Identity thieves are now taking advantage of information publicly posted to social networks to make it easier to steal social security numbers.

 

According to a recent study, an estimated 10 million Americans publish their birthdays in online profiles or provide enough information for their birthdays to be inferred. Depending on the state, the accuracy in which SSNs can be guessed based on the date and place of birth in 100 attempts varies from .08% to over 10%. Combined with a computer program...

Read More >>

CISA Named Best Certification by SC Magazine

Sunday, May 3, 2009 by Robert Brenis CGEIT, CISA, CRISC, PMP

In the information technology world, there are such a variety of professional certifications available that after a while it all starts to look like alphabet soup. SC Magazine, the magazine for IT security professionals, sorted through the clutter and named one certification best of the best – the Certified Information Systems Auditor (CISA) credential.

 

According to SC Magazine, “the technical skills and practices that CISA promotes and evaluates are the building blocks of success in the field....

Read More >>