BUSINESS PRACTICES

NetSuite Supports Best Practices for the management of your business on NetSuite and for NetSuite as a company. NetSuite has architected stable, highly-available systems with multiple layers of redundancy to provide you with unparalleled application availability and reliability. Just like the systems they protect, the processes that govern NetSuite's availability are continuously tested, improved and maintained. Process management is governed by industry best-practices. NetSuite subjects all of its processes and procedures to regular third-party audits as part of its commitment to quality.

• SAS 70 Type II Compliance
  

  NetSuite is certified as a SAS 70 Type II compliant provider of on-demand solutions and services. SAS 70 is an internationally recognized auditing standard; such certification demonstrates that a service organization has been through rigorous audit of its control over information technology and all related processes. Specifically, it assures you that changes to our applications and production systems are properly authorized, tested, approved, implemented and documented; that your data is always backed up and safely stored; and that the code of conduct of NetSuite in terms of our policies, procedures and our responsibility to our customers can provide you with service you can rely on, both now and in the future.

• Payment Card Industry Data Security Standards (PCI DSS)
  

  Both NetSuite and NetSuite Small Business comply with the Payment Card Industry's (PCI) Data Security Standards, adding stronger security parameters to assist our customers in protecting credit card numbers. NetSuite and NetSuite Small Business both provide 3D Secure credit card authentication — also know as Verified by Visa and MasterCard SecureCode. 3D Secure adds a higher level of credit card fraud protection. It requests shoppers to create authentication passwords for their credit cards, or requires them to enter their password if they have already assigned one. See current verification.

• Risk Mitigation
  An effective risk management process is an important component of a successful security program. The principal goal of NetSuite's risk management process is to protect the availability of the NetSuite application. NetSuite's risk management process includes the definitions and practical guidance for assessing and mitigating risks identified within its system. NetSuite's comprehensive risk management process has been modeled after the National Institute of Standards and Technology's special publication 800-30 and is maintained in accordance with the standard.