Andesa Completes Service Organization Controls (SOC)

Andesa Services, a leader in providing SaaS Policy and Plan Administration solutions to life insurance, annuity carriers and benefit participants, announced today the successful completion of its annual Service Organization Control (SOC) examinations as prepared in compliance with American Institute of Certified Public Accountants (AICPA) guidelines. The AICPA has established three, distinct SOC examination engagements – SOC-1, SOC-2 and SOC-3.

Andesa has delivered the following reports to its clients:

• SOC-1/Type II reports – restricted distribution reports that examine the design and operating effectiveness of Andesa’s internal controls over financial reporting as they relate to both Andesa Policy and Plan Administration solutions.
• SOC-2/Type II reports – restricted distribution reports that examine the design and operating effectiveness of Andesa’s internal controls over Information Security as they relate to both Andesa Policy and Plan Administration Solutions.
• SOC-3 reports – unrestricted distribution summary reports issued upon successful completion of SOC-2/Type II as they relate to both Andesa Policy and Plan Administration Solutions.

A Significant Enhancement in Control Reporting for Andesa Services

“As Andesa Services continues to grow and evolve its applications and cloud infrastructure, we routinely re-align our system of internal controls to ensure the confidentiality, integrity and availability of our services” stated Roy Peterson, Andesa Services Chief Technology Officer

We pride ourselves on establishing high quality standards with regard to process improvements, technology enhancements and reporting. The successful completion of these SOC examinations demonstrates Andesa Services commitment to maintaining these standards.