tag:blogger.com,1999:blog-626694840902767365.post8134790799429224758..comments2010-12-17T14:35:00.015+01:00FriendlyCRMonsternoreply@blogger.comBlogger1125tag:blogger.com,1999:blog-626694840902767365.post-65392778774097181332010-12-17T14:35:00.015+01:002010-12-17T14:35:00.015+01:00My understanding of SAS70 Type II certification is that a company is audited to ensure that it meets standards that it sets for itself. So if there policy is to leave the data centre unlocked at night, then they'll pass their SAS70 Type II audit so long as the data centre is never locked at night. ISO17799 on the other hand actually defines a tougher set of security standards against which a company can be audited.crmrockstarhttp://customery.co.uk/noreply@blogger.com