PINAKES is a rating framework developed by the Spanish banking association Centro de Cooperación Interbancaria (CCI) (link resides outside ibm.com). The framework is designed to manage and monitor the cybersecurity controls of technology suppliers supporting Spanish financial entities. PINAKES is based upon the due diligence and compliance directions provided in European Banking Authority Guidelines (EBA/GL/2019/02) (link resides outside ibm.com).
PINAKES assessments are conducted by CCI-approved, independent third-party evaluators. PINAKES evaluations include information security management, incident management, encryption, systems operation, resilience and access control. The evaluators assess services by considering three main aspects: integrity, confidentiality and availability. These three concepts are then scored from D to A+ for a final rating (such as ABA or BAC).
Reports and other documentation
Contact an IBM representative to request PINAKES reports
IBM Cloud has secured an AAA rating for PINAKES and is listed as an evaluated supplier on the PINAKES website here (link resides outside ibm.com).
IBM Cloud’s PINAKES AAA rating demonstrates that IBM has a firm commitment to service integrity, confidentiality and availability.
IBM has qualified AAA on the following categories of PINAKES : IaaS, PaaS and VPC