VMware vCloud Blog: VMware vCloud Hybrid Service adds SOC1 Type 2 (SSAE 16) and SOC 2 Type 2

VMware has successfully completed Service Organization Control (SOC) 1 SSAE 16 Type 2 and SOC 2 Type 2 examinations for VMware vCloud® Hybrid Service™.

In less than a year since launch, vCloud Hybrid Service has made substantial ground in the compliance space. To date, VMware has successfully attained ISO 27001 certification, completed examinations for HIPAA / HITECH, SOC 2 Type 1, SOC 1 (SSAE 16 / ISAE 3402) Type 2, and SOC 2 Type 2 on vCloud Hybrid Service. VMware will continue to invest in this space.

SOC 1 reports are conducted in accordance with Statement on Standards for Attestation Engagements (SSAE) No. 16 put forth by the Auditing Standards Board (ASB) of the American Institute of Certified Public Accountants (AICPA). The SOC 1 framework reports on a service organization’s controls that are likely to be relevant to user entities’ internal controls over financial reporting. SSAE 16 also aligns to International Standard on Assurance Engagements (ISAE) 3402 international reporting standard giving customers, both inside and outside the United States, a common set of assurances. In many cases, vCloud Hybrid Service is often part of a customer’s IT general controls upon which financial systems or applications may be hosted.

In addition to SOC 1, the AICPA put forth the SOC 2 framework which is a separate reporting option specifically designed for service provides that do not have a financial reporting impact to their customers, such as data centers, managed service providers, SaaS vendors and other technology and cloud-computing based businesses. The SOC 2 framework is composed of a comprehensive set of criteria supporting five independent trust services principles (TSPs) which include security, availability, processing integrity, confidentiality, and privacy.

VMware contracted with an independent third party auditor to be assessed over a six-month review period to support our SOC 1 and SOC 2 Type 2 examinations for vCloud Hybrid Service. To review a copy of the SOC 2 Type 2 and SOC1 Type 2 examination reports, contact your VMware sales representative.

To learn more about our upcoming features and capabilities, follow the vCloud blog with your favorite RSS reader, or follow our social channels at @vCloud and http://on.fb.me/1du0HI3.

To get started with the vCloud Hybrid Service, visit vCloud.VMware.com

via VMware Blogs http://bit.ly/MyH3l5