difference between

WebTrust is an assurance service jointly developed by the American Institute of Certified Public Accountants (AICPA) and the Canadian Institute of Chartered Accountants (CICA).

WebTrust audit compliance covers Availability, Confidentiality, Processing Integrity and Security. The Ariba Supplier Network has been in compliance with WebTrust for many years; our On-Demand Sourcing/Contract Management/SV (S4) applications, On-Demand P2P/T&E/EIPP (SSP) applications, and internal AS, ACM & Analysis (SV) hosted upstream applications (On-Demand enterprise/hosted cd-rom) are also in compliance with WebTrust.

WebTrust, SysTrust, and SAS70 are closely related standards; you can read more about them at the SAS70 FAQ website at:

The most salient difference between WebTrust (and SysTrust) and SAS70 is WebTrust is a predefined industry standard set of principles and criteria and the organization is audited against that standard, and in SAS70 each organzation defines its own set of criteria and is then audited against the criteria it defined.

regards,

ratan