Technology Nonprofit, MCNC, Attains SOC 2 Type II Data Center Compliance

Share Article

Certified by Assure Professional, the audit demonstrates the North Carolina Research and Education Network (NCREN) is effectively safeguarded against cybersecurity threats.

“We commend MCNC for taking the initiative to evidence that their control environment has been implemented successfully and is operating as intended.”—Juan Vargas, Assure Professional Senior IT Security Auditor

MCNC—a technology nonprofit that builds, owns and operates the North Carolina Research and Education Network (NCREN) —has been examined by Assure Professional—a leading cybersecurity, assurance and compliance solutions provider—for the (SOC) 2 Type II attestation, by the standards established by the American Institute of Certified Public Accountants (AICPA). MCNC’s 5,000 square-foot data center located in Research Triangle Park, North Carolina is SOC 2 Type II compliant.

“We commend MCNC for taking the initiative to evidence that their control environment has been implemented successfully and is operating as intended,” said Juan Vargas, Assure Professional Senior IT Security Auditor. “It is admirable for a company to provide this assurance to their users.”

SOC 2 Type II compliance is designed for the burgeoning number of technology and cloud computing organizations and is based on Trust Services Principles (TSP): security, availability, processing integrity, confidentiality and privacy. Entities seeking this industry-leading certification go through a rigorous auditing process intended to maintain data security.

"MCNC recognizes the increasing importance of ensuring our services are secure and resilient in the face of cyber threats," said Chris Beal, MCNC Chief Information Security Officer. "The SOC 2 Type II standard sets a clear bar for appropriate security and risk management practices, and then goes a step further to ensure the right controls are in place, signifying our commitment to operating a secure data center."

To be SOC 2 Type II compliant, an independent auditor tests and reports, for a period of six months to a year, on the structure and operational soundness of a service organization’s controls, specifically related to IT and data center service providers. The certification not only accounts for a data center’s system and suitability of its design of controls as reported by the company, but also includes verification of an auditor’s opinion on the operating effectiveness of the controls.

"From basic broadband to advanced services for experimental networks, MCNC is instrumental in connecting millions of North Carolinians with reliable and forward-thinking technology solutions," said Jean Davis, MCNC President and CEO. “This extensive effort to validate our security protocols and procedures further demonstrates our commitment to our customers with a structured approach to risk management.”

MCNC offers colocation, data protection, and managed hosting within its data centers. MCNC’s Network Operations Center (NOC) staff and Client Network Engineers (CNE) offer a range of expertise from the most basic managed hosting services to more advanced performance monitoring, digital diagnostics, architecture assessments and planning, system tuning, IT management, and planning services. For more information, view the MCNC Service Catalog. For more information and specifics about MCNC Security, visit here.

About Assure Professional
Assure Professional, a leading cybersecurity, assurance and compliance solutions provider, specializes in providing due diligence, private equity, and accounting services as well as compliance related engagement programs including, SOC 1 (formerly SSAE 16) Audits, SOC 2 + HITRUST Audits, SOC Readiness Assessments, SOC for Cybersecurity, SOC for Vendor Supply Chain, ISO 27001 Assessments and HIPAA/HITECH Assessments. The firm’s leadership team has nearly 70 years of combined business management, operations and related information technology (IT) experience. Headquartered in De Pere, Wisconsin, Assure Professional has implemented business and technology best practices for companies across a variety of industries in US states, as well as Canada, South America, and several European countries. Visit http://www.assureprofessional.com. Assure Professional Social: Facebook, Twitter @assurepro, LinkedIn.

About MCNC
MCNC, a technology nonprofit that builds, owns and operates the North Carolina Research and Education Network (NCREN), has served research, education, non-profit health care and other community institutions with Internet connectivity in the state for more than 30 years. NCREN is the fundamental broadband infrastructure for more than 500 of these institutions including all K-20 education in North Carolina. As one of the nation's premier middle-mile networks, MCNC leverages high-speed fiber on NCREN to customize Internet services and related applications for each customer while supporting private service providers in bringing cost-efficient connectivity to rural and underserved communities in North Carolina. Visit http://www.mcnc.org. MCNC Social: Facebook, Twitter @MCNC, YouTube, Google+, LinkedIn.

###

Share article on social media or email:

View article via:

Pdf Print

Contact Author

Ruth Fameree
Visit website

Media