assurance - [Assurance] silver, passwords in remote centers, SOC2

Subject: Assurance

List archive

[Assurance] silver, passwords in remote centers, SOC2

From: Steven Carmody <>
To:
Subject: [Assurance] silver, passwords in remote centers, SOC2
Date: Wed, 10 Apr 2013 16:31:44 -0400
Authentication-results: sfpop-ironport05.merit.edu; dkim=neutral (message not signed) header.i=none

Hi,

Our local Silver team will be meeting tomorrow.

About a month ago there was some discussion on this list of possibly using a SOC2 audit report as evidence that a remote data center holding campus user passwords was actually being operated in compliance with the Silver standards.

I'm writing to ask whether anyone has pursued this idea. And, if yes, what conclusions you came to. Would your campus consider a SOC2 audit report to be sufficient evidence ?

Thanks very much!

[Assurance] silver, passwords in remote centers, SOC2, Steven Carmody, 04/10/2013
- RE: [Assurance] silver, passwords in remote centers, SOC2, Capehart,Jeffrey D, 04/10/2013
  - RE: [Assurance] silver, passwords in remote centers, SOC2, Rank, Mark, 04/10/2013
  - Re: [Assurance] silver, passwords in remote centers, SOC2, Tom Scavo, 04/10/2013
  - Re: [Assurance] silver, passwords in remote centers, SOC2, Steven Carmody, 04/12/2013

List archive

[Assurance] silver, passwords in remote centers, SOC2