IBM Cloud® compliance: HCF Australia
Illustration shows people different platforms, with one person encountering a security shield as they use a smartphone. The other person reviews a global map.
Overview
What is HCF?

The HCF provides for three levels of certification: Strategic, Assured and Uncertified. HCF Strategic certification represents the highest level of assurance and is only available to cloud service providers that allow the government to specify ownership and control conditions, as well as increased security controls. Strategic certified cloud services are required for sensitive government data, whole-of-government systems and systems rated at the classification level of “PROTECTED,” and are suitable for other government customers with a high-risk profile, or those seeking additional protections for their data.

Related programs

IRAP

HCF certification levels

The HCF provides for three levels of certification: Strategic, Assured and Uncertified. IBM Cloud maintains HCF Strategic certification, which represents the highest level of assurance and is only available to cloud service providers that allow the government to specify ownership and control conditions, as well as increased security controls.

Strategic certified cloud services are required for sensitive government data, whole-of-government systems and systems rated at the classification level of “PROTECTED,” and are suitable for other government customers with a high-risk profile, or those seeking additional protections for their data.

IBM position

IBM Cloud maintains HCF Strategic certification for the SYD04/zone2 and SYD05/zone3 facilities within the Sydney Multi-Zone Region. Customers that require HCF certification can choose these HCF Strategic-certified zones to deploy their IBM Cloud Services.

Reports and other documentation

View the DHA list of HCF-certified cloud service providers.

See the list
Resources Take a deeper dive

Want further information on the HCF? We’ve got it.

Related programs IRAP (Australia)

The Infosec Registered Assessors Program is administered by the Australian Cyber Security Centre, and works to ensure the safety of Australian IT and communications signals.

SCEC (Australia)

The Security Construction and Equipment Committee is a program led by the Australian Security Intelligence Organisation, which checks security equipment used by the Australian government.

Take the next step

Questions about a compliance program? Need a protected compliance report? We can help.

See more compliance programs