SAS 70

Database Protection and Intrusion Prevention for SAS 70 Reporting 
 

Ensure Effective Data Security Accountability Controls

The database activity monitoring and intrusion prevention software provided by Sentrigo’s Hedgehog™ supports the reporting controls needed for the Statement on Auditing Standards No. 70 (SAS 70).

Hedgehog allows auditors to certify that a service company has the appropriate controls in place to safeguard customer data. With Hedgehog, it's become easy to facilitate the job of the auditors, and to demonstrate who was doing what in the database - The SAS 70 audit process can be automated, while saving time and  costs.

To this end, the Sentrigo Hedgehog solution addresses company accountability by providing data protection and monitoring of database activity in real time.  This includes access to financial and other sensitive customer data.
 

Sentrigo helps auditors by simplifying the audit process and by making report generation easy.

Sentrigo Hedgehog’s Key Benefits for SAS 70 Quickly turns SAS 70 measures into actionable database protection policies by using a wizard-driven template.

• Monitors all relevant financial activities in the database in real time, including local access by privileged users and memory-based activities (e.g., stored procedures, triggers, views) for accurate and complete reporting transparency
• Accelerates regulatory compliance by providing auditors with detailed, relevant information and pre-defined or customized reportrs on access to financial data
• Enabling a High Standard of Accountability

  Hedgehog enables full traceability of data (audit trail) and the separation of duties (audit independence). Additionally, since sensitive financial data resides in databases, SAS 70 auditors look for clear and easily verifiable ways to view database activity so that it can be easily interpreted and acted on.