Supporting Your Compliance

ISO 27001

The International Organization for Standardization 27001 Standard (ISO 27001) is an information security standard that ensures office sites, development centers, support centers and data centers are securely managed. These certifications run for 3 years (renewal audits) and have annual touch point audits (surveillance audits).

To request a our ISO 27001 Certificate , please contact your account representative.

ISO 27018 Certified

The International Organization for Standardization 27018 Standard (ISO 27018) covers privacy protections for the processing of personal information by cloud service providers.

To request a our ISO 27018 Certificate , please contact your account representative.

ISO 27017

ISO/IEC 27017 is a security standard developed for cloud service providers and users to make a safer cloud-based environment and reduce the risk of security problems.

To request the ISO 27017 certification, please contact your account representative.

AICPA SOC 2

Netskope System & Organization Control (SOC) Reports are independent third-party examination reports that demonstrate how Netskope achieves key compliance controls and objectives. The purpose of these reports is to help you and your auditors understand the Netskope controls established to support operations and compliance.

To request a copy of our SOC 2 report , please contact your account representative.

CSA STAR Certification

The CSA Security, Trust and Assurance Registry (STAR) encompasses the key principles of transparency, rigorous auditing, harmonization of standards, with continuous monitoring. STAR consists of three levels of assurance, which currently cover four unique offerings all based upon a succinct yet comprehensive list of cloud-centric control objectives in the CSA’s Cloud Controls Matrix (CCM). CCM is the only meta-framework of cloud-specific security controls, mapped to leading standards, best practices and regulations. CCM provides organizations with the needed structure, detail and clarity relating to information security tailored to cloud computing.

View our CSA STAR Level II Certification.

Cloud Computing Compliance Controls Catalog (C5)

Cloud Computing Compliance Controls Catalog (C5) is a German Government-backed attestation scheme introduced in Germany by the Federal Office for Information Security (BSI) to help organizations demonstrate operational security against common cyber-attacks within the context of the German Government’s “Security Recommendations for Cloud Providers”.

To request a copy of our C5 report , please contact your account representative.

As part of its Health Insurance Portability and Accountability Act (HIPAA) compliance program, Netskope has been assessed against the controls in place to satisfy the requirements of the HIPAA Security Rule, as well as the requirements of the HIPAA Breach Notification Rule as formalized by the Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009 and the Omnibus Rule of 2013.

To request a copy of our HIPAA Assessment Report, please contact your account representative.

Apply strong security controls and encryption to protect cardholder data across cloud and web systems. Automate threat detection, enforce least privilege with MFA, and maintain real-time audit trails for PCI DSS v4.0.

To request a our PCI DSS Certificate, please contact your account representative.

UK Cyber Essentials

Cyber Essentials is a United Kingdom government information assurance scheme that is operated by the United Kingdom National Cyber Security Centre (NCSC). It encourages organisations to adopt good practice in information security. Cyber Essentials also includes an assurance framework and a simple set of security controls to protect information from threats coming from the internet.

To request the UK Cyber Essentials certification, please contact your account representative.

Infosec Registered Assessors Program (IRAP)

IRAP endorses individuals from the private and public sectors to provide security assessment services.

ASD endorses suitably-qualified cyber security professionals to provide relevant services which aim to secure broader industry and Australian Government systems and data.

Endorsed IRAP assessors assist in securing your systems and data by independently assessing your cyber security posture, identifying security risks and suggesting mitigation measures.

To request a copy of Netskope’s IRAP Assessment letter, please contact your account representative.

National Security Scheme (High category)

Netskope is certified in the High category of the National Security Scheme (Esquema Nacional de Seguridad). This certification defines the security standards that apply to all government agencies and public organisations in Spain, as well as the service providers on which public services depend.

Click here to see our certification.

Data Privacy Framework (DPF) Program

The EU-U.S. DPF, UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF were respectively developed by the U.S. Department of Commerce and the European Commission, UK Government, and Swiss Federal Administration to provide organizations with reliable mechanisms for personal data transfers to the United States from the European Union, United Kingdom, and Switzerland while ensuring data protection that is consistent with EU, UK, and Swiss law.

For further information on Netskope’s participation in the program, please visit https://www.netskope.com/privacy-policy