신뢰 센터

SOC 1 (System and Organization Controls) is a report on controls at a service organization relevant to a entity’s control over financial reporting.

Learn more

SOC 2 (System and Organization Controls) is a regularly refreshed report that focuses on non-financial reporting controls as they relate to security, availability, and confidentiality of a cloud service.

Learn More

SOC 3 (System and Organization Controls) is a regularly refreshed report that focuses on internal controls as they relate to security, availability, and confidentiality of a cloud service.

Learn more

IRAP (Infosec Registered Assessors Program) ensures entities can access high-quality security assessment services. The Australian Signals Directorate is supporting higher standards for security assessments and training through the enhanced Infosec Registered Assessor Program (IRAP).

Learn More

ISO 27001 is specification for an information security management system (ISMS), which is a framework for an organization’s information risk management processes.

Learn More

ISO/IEC 27017 is an information security standard that provides additional guidance for relevant controls specified in ISO/IEC 27002; implementing information security controls within a Cloud computing environment for organizations that have an ISMS (information security management system) in place.

Learn More

ISO 27018 builds on the ISO 27001 information security management system (ISMS) with a focus on protecting personally identifiable information (PII) in public clouds.

Learn More

ISO 27701 is a standard designed to help organizations responsibly manage and/or process PII through the implementation of a Privacy Information Management System (PIMS).

Learn more

The Federal Risk and Authorization Management Program (FedRAMP) is a US government-wide program that provides a standardized approach to security and risk assessment, authorization, and continuous monitoring for cloud products and services. All cloud services in use by federal agencies must meet FedRAMP requirements at the appropriate impact level (Low, Moderate, or High).

Learn More

The Cloud Computing Compliance Controls Catalog (C5) is a German framework created by the German Federal Office for Information Security (BSI) which specifies minimum security requirements for cloud services.

Learn more

Common Criteria (CC), also known as ISO/IEC 15408, is an international standard for evaluating and certifying the security features of information technology products and systems, providing a framework for ensuring that products meet specific security requirements.

Learn More

The Cloud Security Alliance (CSA) Security, Trust, Assurance, and Risk (STAR) Level 1 is a publicly accessible registry that documents the security and privacy controls provided by popular cloud computing offerings. This self-assessment demonstrates our commitment to transparency and adherence to industry best practices in cloud security.

Learn More

StateRAMP (dba GovRAMP) is the leading authority on cloud security standards for federal, state,and local government organizations, providing a standardized approach to assessing and authorizing cloud services. GovRAMP empowers the public sector and their vendors to navigate the complexities of cloud security with confidence.

Learn more