Serengeti Successfully Completes SAS 70 Type II Examination of E-Billing/Matter Management System and Operations

Independent Examination of Profession’s Most Widely Used System Supports Law Departments’ Compliance with Sarbanes-Oxley

Bellevue, WA – May 27, 2009 – Serengeti Law is pleased to announce the successful completion of a comprehensive SAS 70 Type II examination conducted by Ernst & Young. The review is an independent confirmation of the quality and effectiveness of Serengeti’s overall practices in safeguarding the data of its 260+ law department customers and their more than 19,000 law firm and other vendor offices worldwide.

“We are proud of the fact that we did it right,” said Richard Boone, Serengeti’s Vice President of Operations. “Unlike many reviews that focus solely on the datacenter, this is a more complete evaluation encompassing physical and logical security, change control, and quality assurance. We have always held ourselves to the highest standards, and this validates the effectiveness of what we have done.”

This examination further establishes Serengeti as the leading e-billing/matter management system for the legal profession. There is a fundamental difference between a SAS 70 Type I review, which does not actually test the effectiveness of the stated controls, and a SAS 70 Type II review, which is a verification by an independent auditor that the company has in fact effectively implemented the controls. Furthermore, there is a significant difference between a Type II review covering only a company’s physical security of their datacenter, and a more comprehensive Type II review that tests not only physical security but also the internal controls and operating processes which are, in practice, the key contributors to maintaining the integrity of customer data. Serengeti’s comprehensive SAS 70 Type II examination sets a new standard for independent verification of security controls for the industry.

About SAS 70
SAS 70 is designated by the U.S. Securities and Exchange Commission as an acceptable method for a user organization to obtain assurances about a service organization’s internal controls without conducting separate assessments. Under Section 404 of Sarbanes-Oxley, public companies generally rely upon a SAS 70 Type II report from service providers to evaluate security, IT operations, change management, and organizational controls.

About Serengeti Law
Serengeti Law provides Serengeti Tracker, the most widely used and highest rated matter management and electronic invoicing service for corporate law departments to work more efficiently with their law firms. Serengeti Tracker has been selected by more than 260 law departments (including over 100 of the Fortune 1000), and is used by more than 90,000 legal professionals in 160 countries. It includes online document and contract management, electronic bill auditing, automated budget management, and performance tracking. In-house counsel can also create configurable management reports online to analyze trends in spending, track status and results, and create performance benchmarks. More information is available at: www.serengetilaw.com.

Press Contact:

Rob Thomas
Vice-President, Strategic Development
Serengeti Law
(425) 732-5518
rob.thomas@serengetilaw.com

■ TOP



Back to Press Releases Articles of Interest News Archives	Serengeti Successfully Completes SAS 70 Type II Examination of E-Billing/Matter Management System and Operations Independent Examination of Profession’s Most Widely Used System Supports Law Departments’ Compliance with Sarbanes-Oxley Bellevue, WA – May 27, 2009 – Serengeti Law is pleased to announce the successful completion of a comprehensive SAS 70 Type II examination conducted by Ernst & Young. The review is an independent confirmation of the quality and effectiveness of Serengeti’s overall practices in safeguarding the data of its 260+ law department customers and their more than 19,000 law firm and other vendor offices worldwide. “We are proud of the fact that we did it right,” said Richard Boone, Serengeti’s Vice President of Operations. “Unlike many reviews that focus solely on the datacenter, this is a more complete evaluation encompassing physical and logical security, change control, and quality assurance. We have always held ourselves to the highest standards, and this validates the effectiveness of what we have done.” This examination further establishes Serengeti as the leading e-billing/matter management system for the legal profession. There is a fundamental difference between a SAS 70 Type I review, which does not actually test the effectiveness of the stated controls, and a SAS 70 Type II review, which is a verification by an independent auditor that the company has in fact effectively implemented the controls. Furthermore, there is a significant difference between a Type II review covering only a company’s physical security of their datacenter, and a more comprehensive Type II review that tests not only physical security but also the internal controls and operating processes which are, in practice, the key contributors to maintaining the integrity of customer data. Serengeti’s comprehensive SAS 70 Type II examination sets a new standard for independent verification of security controls for the industry. About SAS 70 SAS 70 is designated by the U.S. Securities and Exchange Commission as an acceptable method for a user organization to obtain assurances about a service organization’s internal controls without conducting separate assessments. Under Section 404 of Sarbanes-Oxley, public companies generally rely upon a SAS 70 Type II report from service providers to evaluate security, IT operations, change management, and organizational controls. About Serengeti Law Serengeti Law provides Serengeti Tracker, the most widely used and highest rated matter management and electronic invoicing service for corporate law departments to work more efficiently with their law firms. Serengeti Tracker has been selected by more than 260 law departments (including over 100 of the Fortune 1000), and is used by more than 90,000 legal professionals in 160 countries. It includes online document and contract management, electronic bill auditing, automated budget management, and performance tracking. In-house counsel can also create configurable management reports online to analyze trends in spending, track status and results, and create performance benchmarks. More information is available at: www.serengetilaw.com. Press Contact: Rob Thomas Vice-President, Strategic Development Serengeti Law (425) 732-5518 rob.thomas@serengetilaw.com ■ TOP