Benefitfocus® Awarded SAS 70 Certification
Healthcare technology innovator achieves third-party validation
Charleston, S.C. – Aug. 3, 2009 – Benefitfocus, the largest healthcare benefits software provider in the U.S., announced the successful completion of Statement on Auditing Standards No. 70 (SAS 70) Type I certification, which was completed by independent accounting and auditing firm Ernst & Young, LLP. Completion of this audit review process demonstrates Benefitfocus’ commitment to regimented processes and anticipatory service to their partner customers.
The SAS 70 for Benefitfocus targeted three core areas of the Company’s service operations: Client Services, Carrier Operations, Technology Operations, as well as General Computer Controls. Ten control objectives were examined across these areas, testing 82 different controls, including all software and hardware change management procedures, quality assurance testing, security, monitoring and backup procedures.
“Obtaining our SAS 70 Type I Certification provides a formal affirmation of the performance and support Benefitfocus provides its partner customers and vendors,” stated Don Taylor, Benefitfocus Chief Technology officer. “We are pleased to have reached this milestone showing that our customers are being protected by best-of-breed operational controls.”
Statement on Auditing Standards No. 70, Service Organizations, is an international auditing standard developed by the American Institute of Certified Public Accounts (AICPA). A SAS 70 report validates a service organization has been through an in-depth audit of their control objectives and control activities, which includes information technology and related processes. These audits demonstrate that a service organization has adequate controls and safeguards in place when they host or process data belonging to their customers.
"We are committed to providing operational excellence and industry leading service to our customers," said Annmarie Fini, Benefitfocus SVP of Client Services.
