Q

Differences between an SAS 70 data center and a Tier III data center

Learn what the difference is between an SAS 70 data center and a Tier III data center and the strengths and weaknesses of each in this response from security management expert Mike Rothman.

What is the difference between a SAS 70 data center vs. a Tier III data center?
That's an interesting question. These two are kind of like apples and oranges, since a Tier III data center is concerned with how the hosting provider deals with redundant cooling and power from an uptime and availability perspective, and SAS 70 (especially Type 2) assessments really evaluate the controls' effectiveness.

An SAS 70 data center will have undergone a process to assess its security controls against a set of controls mutually agreed upon by the auditor and the data center.

So the choice depends on whether availability or security is the key attribute in a hosting provider. Most organizations say both, and they are probably right. But if it has to be one or the other, a SAS 70 data center focuses on security controls, and a Tier III is concerned with ensuring availability.

More information:

This was first published in August 2008

Dig deeper on Database Security Management

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchCloudSecurity

SearchNetworking

SearchCIO

SearchConsumerization

SearchEnterpriseDesktop

SearchCloudComputing

ComputerWeekly

Close