Dynatrace DPM Controls Effectiveness.pdf

- Purpose: Independent Service Auditor's Report on Dynatrace LLC's Digital Performance Management (DPM) Platform System.
- Period: July 1, 2018 to June 30, 2019.
- Assertion: Dynatrace Management asserted that controls within the DPM system were effective in achieving service commitments and system requirements based on applicable trust services criteria (security and availability).
- Service Auditor's (IS Partners, LLC) Responsibilities:
- Examine Dynatrace's assertion.
- Express an opinion on the fairness of the assertion.
- Plan and perform examination to obtain reasonable assurance about the assertion's fairness.
- Examination Included:
- Understanding the system and service commitments.
- Assessing risks of controls not being effective.
- Gathering evidence on control effectiveness.
- Performing other necessary procedures.
- Inherent Limitations: Controls may not always operate effectively due to human error or circumvention, and future projections are subject to changes in conditions.
- Opinion: The auditor's opinion is that Dynatrace's assertion is fairly stated, in all material respects.
- Dynatrace's Responsibilities: Design, implement, operate, and maintain effective controls within the system.
- Assertion by Dynatrace Management: Controls within the system were effective in achieving service commitments and system requirements based on applicable trust services criteria.
- System Boundaries: The Dynatrace DPM system includes infrastructure, software, people, procedures, and data components, with detailed descriptions for each.