Medac, Inc. Completes SOC 2 TYPE 1 Attestation

Staff Report From Augusta CEO

Monday, February 22nd, 2016

Medac, Inc., a Medical Business Management Services provider, today announced that the company has successfully completed a Service Organization Control 2 Type 1 certification under AT Section 101. Completion of the SOC 2 Type I examination is widely recognized because it represents that a service organization has been through an evaluation of their control activities as they relate to the applicable Trust Services Principles and Criteria.
 
The SOC 2 Type 1 developed by the American Institute of Certified Public Accountants, is the most widely recognized authoritative guidance that provides service organizations a uniform method for disclosing independently assessed information about the design and operation of internal controls related to their services.  
 
Companies who complete an annual SOC 2 examination are able to demonstrate a substantially higher level of assurance and operational visibility than those companies who do not.
 
Bellinger Moody, Medac’s Chief Executive Officer, said “The SOC 2 Type 1 process is vital to Medac’s security and controls posture.  It provides an outside validation for our clients, vendors, and board of directors that we are committed to excellence as we continue to grow.”
 
The SOC 2 Type 1 examination demonstrates a company’s continued commitment to create and maintain the most stringent controls needed to ensure the highest quality and security of services provided to their customers.  The five control principles are;
 
1.      Security: The system is protected against unauthorized access, use, or modification
2.      Availability: The system is available for operation and use as committed or agreed.
3.      Processing Integrity: System processing is complete, accurate, timely, and authorized.
4.      Confidentiality: Information designated as confidential is protected as committed or agreed.
5.      Privacy: The privacy principle addresses the system’s collection, use, retention, disclosure, and disposal of information.
 
The examination was performed by 360 Advanced, P.A., a full-service audit and consulting firm that specializes in integrated compliance solutions, including conducting SOC 2 examinations.
 
The Service Auditors’ Report includes a detailed description of Medac, Inc.’s controls and an independent assessment of whether the controls are placed in operation and suitably designed.  For any further questions, please contact Sam Bruce, PMP, CISM, CSM, CSSGB at Medac.