Service Auditors Report on Controls at a Service Organization Relevant to Security in Accordance with AT Section 101, Attest Engagement

Transcription

1 Service Auditors Report on Controls at a Service Organization Relevant to Security in Accordance with AT Section 101, Attest Engagement For the Period December 1, 2012 to November 30, 2013

2 Table of Contents Section Page(s) I. Independent Service Auditors Report... I 1 II. III. Assertion by Management of INetU... II 1 Description of INetU s Organization Company Overview... III 1 Executive Management... III 1

3 Section I Independent Service Auditors Report

4

5 Section II Assertion by Management of INetU

6 Assertion by Management of INetU The management of INetU, Inc. ( INetU ) maintained effective controls over the security of INetU s Managed Hosting System ( System ) domiciled in Allentown, Pennsylvania to provide reasonable assurance that the system was protected against unauthorized access (both physical and logical) during the period December 1, 2012 to November 30, 2013, based on the AICPA/CICA Trust Services Criteria for Security which is available at Our attached system description summarizes those aspects of this System covered by our assertion. Dev Chanchani President INetU Inc. March 4, 2014 Page II Roble Rd Allentown, PA Phone: Toll Free: Fax:

7 Section III Description of INetU s Organization

8 Company Overview INetU is based in Allentown, Pennsylvania, and operates as a managed hosting provider. INetU s managed hosting provides its clients with managed internet servers and services such as redundant power and network functionality, server architecture consultation, security services, monitoring services, and backup services for business functions including: conducting e commerce business, serving web applications, storing data, web marketing, and managing e mail. INetU hosts and provides maintenance for its clients servers in its data centers. Clients have remote access to the servers on INetU s network via the internet. Utilizing INetU s services enables organizations to take advantage of INetU s network infrastructure and staff of experienced systems administrators. Organizations also rely on the stability of INetU s resources to host mission critical projects without network downtime. In addition to providing and maintaining servers, INetU provides services such as security consultation and monitoring services for many clients. Each client s contract specifies services to be provided by INetU and the cost of the service. Other service providers provide services to INetU s clients including: web development, credit card processing, SSL certificates, and web marketing. INetU s clients contract directly with these providers; thus, the services of these independent service providers are not covered in this report. INetU uses Equinix, Inc. for co location services. The co location sites are not included within the scope of this report. The scope of this report is limited to the System in place in Allentown, Pennsylvania. Executive Management The INetU executive management team provides the overall direction for the Company. All members of the INetU executive management team are actively engaged in the review, approval, and administration of those policies and procedures associated with business operations and the production applications supported by the Company. The executive management team consists of the following individuals: Dev Chanchani CEO and Founder Tim O Keefe Chief Financial Officer Chris Kivlehan Vice President of Account Management David Van Allen Vice President of Operations David Fowler Vice President of Marketing Dev Chanchani CEO and Founder As President of the Company, Dev Chanchani is responsible for maintaining investor relations, shaping the growth paths of the business, and making critical financial decisions. Dev founded INetU in 1995, following years of experience in computer systems, programming, consultation, and marketing. Prior to founding INetU, Dev co founded Internet Unlimited, Inc. and was a project engineer at the Computer Integrated Manufacturing Lab at Lehigh University. Dev has been recognized for his success as a business leader through the Ernst and Young Entrepreneur of the Page III-1

9 Year program where he was a semi finalist. He holds a Bachelor of Science degree in business and economics from Lehigh University and most recently at Harvard Business School in the Owner/President Management Program. Tim O Keefe Chief Financial Officer As Chief Financial Officer, Tim O Keefe is responsible for the Company s overall accounting and finance activities. Tim holds a Bachelor of Science degree in accounting from West Virginia University and is a CPA. Tim possesses more than 20 years of extensive corporate finance and operational experience in manufacturing, professional services, technology, and real estate industries. Tim started his career at KPMG, followed by various financial executive positions with publicly held companies as well as start up organizations. Most recently, he served as CFO for a data center company focused on providing co location and managed hosting services. Chris Kivlehan Vice President of Account Management As the Vice President of Account Management, Chris Kivlehan oversees and provides the strategic guidance for the account management function of the Company, including sales to existing clients and client retention. Chris focuses on leading INetU s team of Chief Hosting Officers, who play an important role in satisfying and developing the client base. In addition, Chris leads strategic company initiatives such as organizational development and cultural growth. Chris holds a Bachelor of Science degree in marketing and obtained execution education certificates in sales and marketing from Northwestern Kellogg and MIT Sloan. Chris previously served as the Company s Vice President of Sales & Marketing, Marketing Manager, and Sales Manager. David Van Allen Vice President of Operations As Vice President of Operations, David Van Allen is responsible for the Company s client services team. Prior to joining INetU, Dave started FASTNET, one of the world s first Internet Service Providers, in As CEO of FASTNET, Dave led the company from startup through initial public offering in While with FASTNET, Dave was involved with INetU since inception of the Company after meeting Dev Chanchani and his team in Dave was a consultant to INetU for a year before joining the Company in 2012 as the Vice President of Sales and Marketing. Before joining INetU, Dave most recently spent 10 years in healthcare industry, which included holding executive board seats on state steering and legislative committees and consulting for both healthcare and technology companies. David Fowler Vice President of Marketing David holds a Master of Business Administration degree from New York University and a Bachelor of Science degree in Computer Science from Worcester Polytechnic Institute. He also has been an advisor and board member to a number of early stage companies and is a frequent speaker at conferences on security, networking and marketing. David has over 35 years of industry and senior management experience in marketing, product management and development, business development, and sales. His most recent role prior to joining INetU was Chief Operating Officer of Courion, a security and compliance software company. Prior to Courion, he led the product, marketing, and engineering teams at VidSys, a security software company in the physical security market. David held Executive Vice President positions responsible for product management, marketing, business development and channel sales at Pragmatech Software and Groove Networks, both enterprise application companies, prior to his time at Courion. Before his position at Page III-2

10 Pramatech Software and subsequently Groove Networks, David was President of the public company Kana Software, the result of the high growth initial public offering of Silknet Software and merger with Kana Software. In addition, David has held executive and general management roles at various industry leading companies such as Sun Microsystems, FTP Software, Chipcom, Wang Labs and Gradient Technologies. Page III-3