<div>
<div class="content wysiwyg-content">
Hi All,<br />
<br />
We have just procured new Payroll and Financial (AP &amp;&nbsp;AR etc.) systems. &nbsp;These two systems will be hosted by the software suppliers whereas the previous systems were internally hosted on our network.<br />
<br />
My concern/question is how we get assurances from the suppliers that the systems are hosted securely as these are quite sensitive systems, preferable without getting another third party involved.<br />
<br />
I’ve heard of asking for evidence of secure development practices but doesn’t this cover how the system was developed rather than how securely it is hosted (although I am sure it is still relevant)?<br />
<br />
Kind regards.
</div>
</div>


Hi All,

We have just procured new Payroll and Financial (AP & AR etc.) systems.  These two systems will be hosted by the software suppliers whereas the previous systems were internally hosted on our network.

My concern/question is how we get assurances from the suppliers that the systems are hosted securely as these are quite sensitive systems, preferable without getting another third party involved.

I’ve heard of asking for evidence of secure development practices but doesn’t this cover how the system was developed rather than how securely it is hosted (although I am sure it is still relevant)?

Kind regards.

Assurance for Cloud Hosted Systems

Cloud services are services made available to users via the Internet from a provider's servers. Cloud services are designed to provide easy, scalable access to applications, resources and services, and are fully managed by a cloud services provider. It is a model for enabling ubiquitous, on-demand access to a shared pool of configurable computing resources. Frequently offered cloud services are infrastructure-as-a-service (IaaS), desktops-as-a-service (DaaS), software-as-a-service (SaaS) and platform-as-a-service (PaaS). Examples of cloud services include online data storage and backup solutions, Web-based e-mail services, hosted office suites and document collaboration services, database processing, managed technical support services and more.