SOC 2 Data Center Compliance

Report on Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality and Privacy

These reports are intended to meet the needs of a broad range of users who must understand internal control at a service organization as it relates to security, availability, processing integrity, confidentiality and privacy. These reports are performed using the AICPA Guide: Reporting on Controls at a Service Organization Relevant to Security, Availability, Processing Integrity, Confidentiality, or Privacy and are intended for use by stakeholders (e.g., customers, regulators, business partners, suppliers, directors) of the service organization that have a thorough understanding of the service organization and its internal controls. These reports can form an important part of stakeholders:

• Oversight of the organization
• Vendor management program
• Internal corporate governance and risk management processes
• Regulatory oversight

SOC 2 Trust Service Principles examination includes:

• Organization and management
• Communications
• Risk management and implementation of controls
• Monitoring of controls
• Logical and physical access controls
• System operations, and
• Change management

The Trust Service Principles of SOC 2 are modeled around four broad areas: Policies, Communications, Procedures, and Monitoring. Each of the principles have defined criteria (controls) which must be met to demonstrate adherence to the principles and produce an opinion by auditor.

What are SOC 2 Type 2 Reports?

Service Organization Control (SOC) Reports are independent third-party examination reports that demonstrate how MULTACOM achieves key compliance controls and objectives. The purpose of these reports is to help you and your auditors understand MULTACOM’s controls established to support operations and compliance. The Type 2 report has an audit period and provides evidence of how MULTACOM operated its controls over a period of time. The initial report is issued for the previous 6-month period and subsequent reports are issued annually covering a 12-month period since the previous report was issued.

Who Performs the Independent Third-Party Audit of MULTACOM for the SOC Reports?

BrightLine CPAs & Associates, Inc. a leading provider of attestation and compliance services is the only company in the world that is a CPA firm, a globally licensed PCI Qualified Security Assessor, an ISO Certification Body and a FedRAMP 3PAO.

How Do I Request a Copy of MULTACOM’s SOC 2 Report?

You can request MULTACOM’s SOC 2 report by contacting sales@multacom.com.

Additional Resources

• MULTACOM Exceeds Strict Data Center Controls and Is Awarded SOC 2 Certification
• What is SOC 2 Type 2 Data Center Certification and How Can It Benefit Your Business?

*The scope of reports and statements made above relate to MULTACOM’s data centers and does not apply to any software managed by clients or clients’ application which may not be in compliance.
If you have any questions, please contact our sales department.