Simplifying the Complexity of Compliance

Meeting the rigorous standards of today’s complex regulatory environment is tough. Most in-house IT departments struggle to meet current standards and to stay in compliance. With our broad understanding of current financial and political regulations and how they apply to architecting your Deltek or QuickBooks Enterprise solution, TBS can help eliminate that struggle.

Though audit thresholds vary, in general all government contractors at a minimum defined size must submit an annual Financial Audit Report to the appropriate procurement agency. Under these rules your business must ensure it maintains “full system control” over its accounting IT infrastructure. This means designated-employee-only access to your accounting hardware and IT facilities, your server operating systems, your databases, and your Deltek software too. (You need all four control facets to fully comply.)

The TBS Enterprise Cloud boasts a comprehensive SSAE16-SOC2 audit-compliant environment (formerly SAS 70 Type II), which enables all our customers -- whether they have 5 or 5,000 employees -- to meet the following standards for their accounting IT infrastructure:

• MA 201 (Massachusetts Data Protection Law) -- arguably the most stringent state personal data protection law in the nation
• ITAR (International Traffic in Arms Regulations) -- all TBS employees are U.S.-born, U.S. citizens, and all TBS-hosted financial data and applications are physically located in the continental United States.
• "High-impact data controls" for CMS (Centers for Medicare and Medicaid Services), of concern to businesses with HHS contracts, and DISA (Defense Information Systems Agency), for organizations that access and maintain Defense Department or Veterans data
• And, with SSAE16 audit certification, TBS provides our clients with a qualifying environment to pass a Sarbanes-Oxley audit on their own financial system.

The old SAS 70 Type II regime that potentially covered many of these rules and controls was discontinued by the American Institute of Certified Public Accountants in 2010, because the AICPA found its application to be ambiguous and often misrepresented. As of 2011, the new SSAE16 system requires cloud providers to follow industry-standard guidelines for each regulatory regime as defined by the AICPA.

• To learn more about the fundamentals of compliance in The Cloud,
  download our whitepaper now.