When choosing a Managed Hosting provider, everything centers on trust, reliability, availability, and security. Your applications, data, and online processes deserve a partner that not only promises this, but is also demonstrably compliant with relevant laws and regulations.

We achieve this by continuously assessing risks and implementing appropriate measures to safeguard the information security and quality of our services. In addition, it is reassuring to know that an independent and qualified external party conducts regular stringent audits on us, issuing an opinion in a transparent SOC 2 type 2 report.

What is SOC 2?
SOC 2 (System and Organization Controls 2) is an internationally recognized Assurance standard with strict requirements and criteria for IT processes that organizations have outsourced to an external service provider, such as Shock Media. In the SOC 2 report, it is assessed whether an organization is compliant with the proper controls to manage these processes. Specifically, compliance with criteria from TSP section 100, Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality and Privacy, is required.

If there are IT processes that may influence financial reporting, sometimes an ISAE 3402 report is also required. Shock Media also has this report.

Demonstrably in control
To demonstrate that we meet the stringent compliance criteria required for SOC 2, independent and qualified (RE) auditors perform periodic audits. This results in a formal report that gives our customers insight into the processes and controls we have implemented to ensure the security and quality of our services.

A SOC 2 type 1 report describes the processes and controls as implemented for Shock Media’s Managed Hosting services. An independent auditor assesses whether the described controls are sufficient to achieve the control objectives, and determines whether they have been adequately implemented. A SOC 2 type 2 report additionally provides insight into the operation and effectiveness of these controls over a specified period. Shock Media is currently in this audit period. These reports provide extra assurance regarding the Managed Hosting of your (business-)critical web applications.

Scope and SOC 2 report
All services offered by Shock Media fall within the scope of our SOC 2 reports. If you have any questions or would like insight into these reports, please contact us at trustcenter@shockmedia.nl.