I work at a company that offers web services to industries that are fairly

paranoid about security. With each customer we encounter they seem to

wince at hosting their data through our servers instead of hosting it

themselves. So we are repeatedly going through security audits of various

types.

My question is this, are there any standards or companies that can do an

audit on a regular basis, who has enough standing in the community that

other companies will take their audit instead of doing their own?

We have already hired independent companies to do audits and we always

turn out fine but from a sales point of view it is becoming a major hurdle

to have to jump over each time.

Thanks

[ reply ]