IBM Cloud Strengthens Compliance Posture, Expanding SOC Audited Services

IBM Cloud continues to expand its compliance posture for Platform as a Service (PaaS) offerings with the System and Organization Controls (SOC) framework.

The System and Organization Controls (SOC) framework, developed by the American Institute of Certified Public Accountants (AICPA), is a standard for controls that protect information stored in the cloud. Certified Public Accountants (CPAs) audit cloud service providers (CSPs), resulting in internal control reports on the services provided by a service organization. SOC reports can help users assess and address the risks associated with an outsourced service.

SOC 1 is an audit of the internal controls at a service organization that were implemented to protect client-owned data involved in client financial reporting. SOC 1 audits and reports are based on the Statement on Standards for Attestation Engagements (SSAE 18) and the International Standards for Assurance Engagements No. 3402 (ISAE 3402).
SOC 2 audits, based on the AICPA Trust Service Principles and Criteria, gauge the internal controls at a service organization that were implemented to protect customer-owned data. SOC 2 reports provide details about the nature of those internal controls.
SOC 3 reports are condensed, publicly available versions of the SOC 2 Type 2 audit report of controls put in place by service organizations. SOC 3 reports are intended for users that don’t need the full details of a SOC 2 report.

A full list of IBM Cloud services with SOC reports available (published SOC 3 reports and options to request SOC 1 and SOC 2 reports) can be found here.

IBM Cloud Services newly audited for SOC

For SOC 1 Type 2:

For SOC 2 Type 1:

For SOC 2 Type 2:

For SOC 3 (reports published here):

Learn more

Get more information on all IBM Cloud compliance programs.

Shaun Taraporewalla

Product Manager, IBM Public Cloud Compliance

IBM Consulting augments expertise with AWS Competencies: A win-win for clients

3 min read - In today's dynamic economic landscape, businesses demand continuous innovation and speed of execution. At IBM Consulting®, our unwavering focus on partnerships and shared commitment to delivering enterprise-level solutions to mutual clients have been core to our success.  We are thrilled to announce that IBM® has recently gained five competencies from Amazon Web Services (AWS) in vital domains including Cloud Operations, Internet of Things (IoT), Life Sciences, Mainframe Modernization, and Telecommunications. With these credentials, IBM further establishes its position as a…

Probable Root Cause: Accelerating incident remediation with causal AI

5 min read - It has been proven time and time again that a business application’s outages are very costly. The estimated cost of an average downtime can run USD 50,000 to 500,000 per hour, and more as businesses are actively moving to digitization. The complexity of applications is growing as well, so Site Reliability Engineers (SREs) require hours—and sometimes days—to identify and resolve problems. To alleviate this problem, we have introduced the new feature Probable Root Cause as part of Intelligent Incident…

Reflecting on IBM’s legacy of environmental innovation and leadership

4 min read - Upholding a legacy of more than 50 years of environmental responsibility through our company’s actions and commitments, IBM continues to be a leader in driving sustainability for our business, our communities and our clients—including a 34-year history of annual, public environmental reporting, which we continue today. As a hybrid cloud and artificial intelligence (AI) company, we believe that leveraging technology is key to unlocking impact, and it will play a substantial role in how society addresses, adapts to, and overcomes…

IBM Cloud continues to expand its compliance posture for Platform as a Service (PaaS) offerings with the System and Organization Controls (SOC) framework.

IBM Cloud Services newly audited for SOC

Learn more

More from Announcements

IBM Consulting augments expertise with AWS Competencies: A win-win for clients

Probable Root Cause: Accelerating incident remediation with causal AI

Reflecting on IBM’s legacy of environmental innovation and leadership

IBM Newsletters