Unfortunately, a SAS 70 audit that only covers the data center aligns quite poorly with the customer’s needs. It doesn’t fully address ANY of the three areas we defined in my last piece. As a result, my advice is to seek out cloud vendors that offer their own audit report. I also recommend giving strong preference to prescriptive audit standards that are explicitly targeted toward information technology systems and processes, such as SysTrust® and ISO 27000.
The Hyland Software Blog
Link to original post