When choosing a Managed Hosting provider, it’s all about trust, reliability, availability, and security—especially when these may also impact financial processes. Your applications, data, and online processes deserve a partner who not only promises this, but can also demonstrably ensure compliance at a high level.

We do this by continuously evaluating risks and taking appropriate measures to ensure the information security and quality of our services. In addition, it is reassuring to know that an independent and qualified external party carries out strict audits at regular intervals, assessing our compliance transparently in an ISAE 3402 report.

What is ISAE 3402?
ISAE 3402 is an internationally recognized Assurance standard setting strict requirements and criteria for IT processes that organizations outsource to external service providers such as Shock Media. The ISAE 3402 (International Standard on Assurance Engagements 3402) in particular focuses on the demonstrable control of IT processes that can influence financial reporting. To manage these processes and stay compliant, Shock Media has implemented an internal control framework that meets the criteria from the TSP section 100, Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality and Privacy.

Alongside our ISAE 3402 report, we also have a SOC 2 report which demonstrates that we comply with the relevant standards for security and privacy.

Demonstrably in control
To demonstrate that we are compliant with the strict criteria applicable for ISAE 3402, periodic audits are conducted by independent and qualified (RE) auditors. This results in a formal report that gives our clients insight into the processes and control measures we have implemented to guarantee the safety and quality of our services.

An ISAE 3402 type 1 report describes the processes and controls as they have been implemented with regard to Shock Media’s Managed Hosting services. An independent auditor assesses the adequacy of the described controls to achieve the stated control objectives and verifies their proper implementation. An ISAE 3402 type 2 report additionally provides insight into the operation and effectiveness of these over a set period. Shock Media is currently in this assessment period. These reports offer extra assurance regarding the compliance of our Managed Hosting for your (business-)critical web applications.

Scope and ISAE 3402 Report
All services offered by Shock Media fall within the scope of our ISAE 3402 reports and are therefore demonstrably compliant. If you have any questions or would like insight into these reports, you can contact us at trustcenter@shockmedia.nl.