IBM Cloud completed its 2023 independent review of IBM Cloud services and processes. The review report demonstrates to its clients, partners and other interested parties that IBM Cloud services have implemented and adhere to the technical, administrative and physical control requirements of IBM Cloud Framework for Financial Services.

What is the IBM Cloud Framework for Financial Services?

IBM Cloud for Financial Services® is designed to build trust and enable a transparent public cloud ecosystem with features for security, compliance and resiliency that are required by financial institutions. Financial institutions can confidently host their mission-critical applications on our cloud, enabling faster and more secure transactions.

At the core of our cloud is the IBM Cloud Framework for Financial Services™, a comprehensive set of control requirements spanning 7 Focus Areas and 21 Control Families, designed by the industry to help address security requirements and regulatory compliance obligations of financial institutions.

What is the Agreed-Upon Procedures report?

As IBM Cloud services are onboarded to IBM Cloud for Financial Services®, IBM conducts a rigorous validation assuring that services meet IBM Cloud Framework for Financial Services technical, administrative and physical controls requirements.

IBM engages a third-party professional services firm to complete an independent review of IBM Cloud services and processes against the Agreed-Upon Procedures (AUP). The IBM Cloud for Financial Services AUP Report is issued by a big four public accounting firm in accordance with the American Institute of Certified Public Accountants (AICPA).

The report addresses controls for all Focus Areas of the IBM Cloud Framework for Financial Services, including the following:

  • Active Monitoring & Response
  • Advanced Data Protection
  • Automated Application & Workload Protection
  • Enhanced Authentication & Access Management
  • Focused Risk Management & Compliance
  • Operational Excellence
  • Unified Infrastructure Security & Resilience

Within each focus area, there are multiple control families and controls, and the report provides details on control descriptions, procedures performed and results.

The report demonstrates to IBM Cloud for Financial Services clients that IBM Cloud services have been implemented against, and adhere to, the IBM Cloud Framework for Financial Services technical, administrative and physical control requirements.

In 2023, IBM Cloud expanded the AUP to include additional locations and services that articulate our commitment to expand our portfolio of compliance across IBM Cloud. The AUP report is available to clients for their internal risk management practices and for demonstrating due diligence and oversight of their cloud service providers to their regulators.

Contact your IBM account team to obtain a copy of the AUP report.

In addition to this report, IBM Cloud compliance and trust certifications further affirm IBM’s commitment to the protection of customer data and applications.

Learn more

Learn more about IBM Cloud® compliance programs Learn more about IBM Cloud for Financial Services®

More from Announcements

IBM named a Leader in Gartner Magic Quadrant for SIEM, for the 14th consecutive time

3 min read - Security operations is getting more complex and inefficient with too many tools, too much data and simply too much to do. According to a study done by IBM, SOC team members are only able to handle half of the alerts that they should be reviewing in a typical workday. This potentially leads to missing the important alerts that are critical to an organization's security. Thus, choosing the right SIEM solution can be transformative for security teams, helping them manage alerts…

IBM and MuleSoft expand global relationship to accelerate modernization on IBM Power 

2 min read - As companies undergo digital transformation, they rely on APIs as the backbone for providing new services and customer experiences. While APIs can simplify application development and deliver integrated solutions, IT shops must have a robust solution to effectively manage and govern them to ensure that response times and costs are kept low for all applications. Many customers use Salesforce’s MuleSoft, named a leader by Gartner® in full lifecycle API management for seven consecutive times, to manage and secure APIs across…

IBM Consulting augments expertise with AWS Competencies: A win-win for clients 

3 min read - In today's dynamic economic landscape, businesses demand continuous innovation and speed of execution. At IBM Consulting®, our unwavering focus on partnerships and shared commitment to delivering enterprise-level solutions to mutual clients have been core to our success.   We are thrilled to announce that IBM® has recently gained five competencies from Amazon Web Services (AWS) in vital domains including Cloud Operations, Internet of Things (IoT), Life Sciences, Mainframe Modernization, and Telecommunications. With these credentials, IBM further establishes its position as a…

IBM Newsletters

Get our newsletters and topic updates that deliver the latest thought leadership and insights on emerging trends.
Subscribe now More newsletters