Regulatory Compliance

 Our products are developed to be innately compliant with critical attention which allows your associates to focus on revenue recovery as opposed to monitoring industry regulations. Among the regulations that are baked into our products are compliance with the following: Health Information Portability and Accountability Act (HIPAA), Gramm Leach Bliley Act (GLB), Fair Debt Collection Practices Act (FDCPA), Federal Information Security Management Act (FISMA), Fair Credit Reporting Act (FCRA), Sarbanes Oxley (SOX), Fair and Accurate Credit Transaction Act (FACTA) and the FTC Red Flags Rules.

In addition, our products are designed to fully adhere to critical industry standards including the Payment Card Industry Data Security Standard (PCI-DSS) and the Payment Application Data Security Standard (PA-DSS).

At Ontario Systems, we are operating our business with industry leading best practices in quality and security. Accordingly, we focus as a team on achieving independently verified certifications that demonstrate our commitment to this goal. Among the certifications either currently attained or in process are SAS 70 Type II Certification, ISO 9001:2008 Quality Certification, ISO 27001:2005 Security Certification and CMMI Level II Software Development Certification.

Ontario Systems Achieves SAS70 Level II Compliance

Reinforcing our reputation as a trusted advisor and valued partner to our clients, Ontario Systems recently completed a SAS70 Level II certification audit. In addition to achieving this control activities certification, Ontario Systems was cited as achieving the “gold standard” among our constituents for our excellent preparation for this audit.

For more information on SAS70 Compliance, please click here.

Ontario Systems Achieves ISO 9001:2008 Certification

ISO 9001:2008 is an internationally accepted standard that outlines commonly accepted best practices for an enterprise wide quality management system. In achieving ISO 9001:2008 certification, Ontario Systems has been recognized as having world class best practices in areas of software development, human resource practices, compliance, security, customer service, supply chain management and sales and marketing processes.   

Furthering our reputation as a high quality solutions and services provider, Ontario Systems completed the ISO 9001 full certification audit in December, 2009 and received certification in January 2010.

For more information on ISO 9001 Certification, please click here.

 ISO 27001 Certification Process In Progress

Information assets, like other business assets, need to be protected against numerous security threats. By developing an Information Security Management System (ISMS), and certifying it to ISO 27001:2005 standards, an organization shows that it has the appropriate controls to preserve confidentiality, integrity and availability of information assets.

Ontario Systems has completed placing these controls in place and has started the process to be ISO 27001:2005 certified. We expect to attain this certification in early 2010 and thus continue our investment in best practices of security and quality.

For more information on ISO Certification, please click here.

Ontario Systems Finalizes Path to CMMI Level 2 Certification

CMMI is a software development process improvement approach which has become the standard for measuring an organization's capability to apply a process based methodology to software development. This approach integrates the entire spectrum of software development including software engineering, testing, and project management. CMMI helps integrate traditionally separate organizational functions, set process improvement goals and priorities, provide guidance for quality processes, and provide a point of reference.

Ontario Systems has completed the implementation of the process and methodology for CMMI certification and is currently in the required monitoring period that will lead to certification in 2010.

For more information on CMMI Certification, please click here.