Successful Completion of SOC Audits Demonstrates Vestmark's Ongoing Commitment to Clients' Data Security

18 (SSAE 18) Type II examination, which test an organization's controls and processes related to data security and accounting.

Metadata
Provider: 
PR NewswirePR Newswire
Retrieved on: 
Wednesday, April 1, 2020
Information
Tags: 
Accounting, Business, Economy, Sarbanes–Oxley Act, Professional accounting bodies, Internal audit, SSAE 16, Standards, Audit, American Institute of Certified Public Accountants, Information technology audit
Geotags: 
Massachusetts
Organisation: 
VESTMARK
Website: 
https://www.vestmark.com
Summary
Key Points: 
  • 18 (SSAE 18) Type II examination, which test an organization's controls and processes related to data security and accounting.
  • As a result of these audits, Vestmark received Service Auditors' Reports demonstrating its procedures, controls, and infrastructure met or exceeded the SOC 1 and 2 criteria for data protection, confidentiality, security, and operational efficiency.
  • SOC 1 and SOC 2 are internationally recognized auditing standards developed by the American Institute of Certified Public Accountants (AICPA).
  • Vestmark continues to maintain one of the most robust data security programs in the industry, supported by excellent operational controls."




Successful Completion of SOC Audits Demonstrates Vestmark's Ongoing Commitment to Clients' Data Security

WAKEFIELD, Mass., April 1, 2020 /PRNewswire/ -- Vestmark announces that it has successfully completed two versions of the Statement on Standards for Attestation Engagement No. 18 (SSAE 18) Type II examination, which test an organization's controls and processes related to data security and accounting.

The SSAE 18 Type II exam, also known as Service Organization Control (SOC) 1 Type II, and the SOC 2 Type II audit, were conducted on both Vestmark's software-as-a-service (SaaS) platform, VestmarkONE®, and its outsourced service offering. The audits were performed by the assurance solutions and compliance firm Skoda Minotti for the fifth consecutive year. As a result of these audits, Vestmark received Service Auditors' Reports demonstrating its procedures, controls, and infrastructure met or exceeded the SOC 1 and 2 criteria for data protection, confidentiality, security, and operational efficiency.

"It is vital that our customers have peace of mind that the confidential information they entrust to us is fully protected," said Charles D. Johnson, Chief Information Officer of Vestmark. "Vestmark is committed to continuously focusing on this area as a firm, and we continue to expand the complexity of the audits we undertake in order to ensure our internal controls and procedures remain on the cutting edge."

SOC 1 and SOC 2 are internationally recognized auditing standards developed by the American Institute of Certified Public Accountants (AICPA). The SOC 1 examination for a SaaS platform validates the data integrity of the system for user organizations. This provides clients with the confidence that their data is secure and accurate. The scope of the review includes controls and procedures related to the secure storage, handling, software development, change management, and transmission of data. Vestmark's audited functions included network connectivity, firewall configuration, disaster recovery, database access, data backup, and fire suppression.

The SOC 2 examination focuses on controls and procedures related to compliance and operations, in accordance with the AICPA's Trust Services criteria. The AICPA Trust Services criteria serve as an industry standard in data security, which validates that Vestmark has a vested interest in maintaining world-class information security.

"Since Vestmark first sought us out to perform these rigorous SOC examinations five years ago, we have been consistently impressed with the firm's best-in-class technology and business infrastructure," said Ben Osbrach, CISSP, CISA, QSA, Partner-in-Charge of the Risk Advisory Group at Skoda Minotti. "With SaaS platforms and business outsourcing services becoming more commonplace in financial services and other industries, it is crucial for organizations like Vestmark to demonstrate they have strong accounting controls as well as the capabilities to safeguard confidential data. Vestmark continues to maintain one of the most robust data security programs in the industry, supported by excellent operational controls."

SOC reports have become increasingly vital under Sarbanes-Oxley regulations, which require companies to ensure their third-party service providers have adequate internal data security and accounting controls. Vestmark customers can use the firm's Service Auditor Reports to demonstrate Sarbanes-Oxley compliance, as well as compliance with Health Insurance Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley Act (GLBA), and ISO 27001 regulations.  

About Vestmark:
Headquartered outside of Boston, MA and founded in 2001, Vestmark is a leading provider of portfolio management/trading solutions and outsourced services for financial institutions and their advisors, enabling them to efficiently manage and trade customized client portfolios through an innovative SaaS platform. Supporting over $1.4 trillion in assets and 4.5 million accounts, Vestmark is a trusted partner to some of the largest and most respected wealth management firms. For more information about Vestmark's solutions, call (781) 224-3640, email [email protected], or visit www.vestmark.com.   

Media Inquiries:

JConnelly for Vestmark
Laura Simpson
(973) 850-7319
[email protected]   

Cision View original content to download multimedia:http://www.prnewswire.com/news-releases/successful-completion-of-soc-audits-demonstrates-vestmarks-ongoing-commitment-to-clients-data-security-301033167.html

SOURCE Vestmark



Copyright: 
2020 PR Newswire. All Rights Reserved.