Security, Compliance & Assurance

AICPA SOC 2

Netskope System & Organization Control (SOC) Reports are independent third-party examination reports that demonstrate how Netskope achieves key compliance controls and objectives. The purpose of these reports is to help you and your auditors understand the Netskope controls established to support operations and compliance.

To request a copy of our SOC 2 report , please contact your account representative.

California Consumer Privacy Act

Netskope supports the customer’s compliance for Processing covered by the California Consumer Privacy Act of 2018 (the “CCPA”). To confirm applicable aspects of the CCPA in connection with Customer’s use of the Services, Netskope has provided this Compliance Statement. This notice supplements the Netskope Privacy Policy.

Center for Internet Assurance (CIS)

CIS is an independent, nonprofit organization with a mission to create confidence in the connected world. The Center for Internet Security, Inc. (CIS®) makes the connected world a safer place for people, businesses, and governments through their core competencies of collaboration and innovation. CIS is a community-driven nonprofit, responsible for the CIS Controls® and CIS Benchmarks™, globally recognized best practices for securing IT systems and data.

Netskope CSPM has received CIS Benchmark Certification, specifically:

• CIS Microsoft Azure Foundations Benchmark v1.3.0 – Server Level 1 & 2. Click here to view our CIS Benchmark Certification for Azure
• CIS Amazon Web Services Foundations Benchmark v1.4.0. Level 1 & 2 – Server. Click here to view our CIS Benchmark Certification for AWS

Cloud Computing Compliance Controls Catalog (C5)

Cloud Computing Compliance Controls Catalog (C5) is a German Government-backed attestation scheme introduced in Germany by the Federal Office for Information Security (BSI) to help organizations demonstrate operational security against common cyber-attacks within the context of the German Government’s “Security Recommendations for Cloud Providers”.

To request a copy of our C5 report , please contact your account representative.

CSA STAR Certification

The CSA Security, Trust and Assurance Registry (STAR) encompasses the key principles of transparency, rigorous auditing, harmonization of standards, with continuous monitoring. STAR consists of three levels of assurance, which currently cover four unique offerings all based upon a succinct yet comprehensive list of cloud-centric control objectives in the CSA’s Cloud Controls Matrix (CCM). CCM is the only meta-framework of cloud-specific security controls, mapped to leading standards, best practices and regulations. CCM provides organizations with the needed structure, detail and clarity relating to information security tailored to cloud computing.

View our CSA STAR Level II Certification.