Cavern Technologies has experts available with complete knowledge on most major regulations. By combining our Disaster Recovery, Media Services, and Business Continuity services we can provide a very cost-effective solution to meet the requirements of your company.

Passed in response to several major corporate and accounting scandals, Sarbanes-Oxley (SOX) law guides every publicly traded company to have a Business Continuity Plan for protecting corporate records. SOX compliance demand comprehensive requirements to secure the accountability, automation, and control of all business processes within the corporate setting. Companies failing to comply face consequences ranging from monetary fines , delisting on the stock exchange, to jail sentences.

For additional information about the Sarbanes-Oxley Act please refer to the following sites:
Sarbanes-Oxley Act Community Forums
Full Text of the Sarbanes-Oxley Act of 2002
Summery of the Provisions of the Sarbanes-Oxley Act of 2002
Public Accounting Oversight Board (PCAOB)

The Health Insurance Portability and Accountability Act (HIPAA) protects health insurance coverage for workers and their families when they change or lose their jobs. The Act requires the establishment of national standards for electronic health care transactions and national identifiers for providers, health insurance plans, and employers. The provisions also address the security and privacy of health data. The standards are meant to improve the efficiency and effectiveness of the nation's health care system by encouraging the widespread use of electronic data interchange in the US health care system.

For additional information about HIPAA please refer to the following sites:
Full Text of the HIPPA Act of 1996
U.S. Department of Health and Human Services
HIPAA Final Enforcement Rule - Feb. 2006
HIPAA General Overview by the DHH

The Gramm-Leach-Bliley Act, also known as the Gramm-Leach-Bliley Financial Services Modernization Act is an Act of the United States Congress which repealed the Glass-Steagall Act, opening up competition among banks, securities companies and insurance companies. New rules under the Act include The Financial Privacy Rule which governs the collection and disclosure of customers’ personal financial information by financial institutions. It also applies to companies, regardless of whether they are financial institutions, who receive such information. The Safeguards Rule requires all financial institutions to design, implement and maintain safeguards to protect customer information. The Safeguards Rule applies not only to financial institutions that collect information from their own customers, but also to financial institutions – such as credit reporting agencies – that receive customer information from other financial institutions.

For addition information about the Gramm-Leach-Bliley Compliance Act, please refer to the following sites:
Full Text of the Gramm-Leach-Bliley Compliance Act
U.S. Senate on Banking, Housing, and Urban Affairs
Gramm-Leach-Bliley Compliance FAQ
Gramm-Leach-Bliley Act Summery

SAS 70 allows for one internal control review to be performed on service organizations that examined all of the areas that the financial statement auditors were obligated to consider in order to meet SAS 55 requirements. The resulting service auditor’s report (i.e. SAS 70 report) can be distributed and relied upon by all of the financial statement auditors of the service organizations clients. The extent of that reliance is based on whether a Type I or Type II SAS 70 audit was performed. The use of the SAS 70 audit has migrated to be used in non-traditional ways. Service organizations providing services to companies in the financial services industry are being required to have a SAS 70 review conducted to comply with Gramm-Leach-Bliley requirements. Service organizations which provide services to healthcare companies are asked by their clients to have a SAS 70 audit conducted to ensure a third party has examined the controls over the processing of healthcare information due to its sensitivity.

For additional information about SAS 70 Auditing Standards, please refer to the following sites:
SAS 70 Overview
SAS 70 Act Review