Introduction
This document describes the Umbrella SOC 2 attestation.
Overview
Data is one of the most valuable assets for your organization and it is critical to choose a vendor that prioritizes handling data the right way. We want you to be confident that Cisco Umbrella has the necessary controls in place to effectively protect the security, availability, and confidentiality of your data.
We are pleased to announce that Cisco Umbrella has been assessed for SOC 2 Type II standards, allowing you to deploy advanced security capabilities with the confidence that your data is secure.
What is SOC 2?
SOC 2 is a framework applicable to all technology service and SaaS companies who store customer data in the cloud. SOC 2 helps ensure that organizational controls and practices are in place to effectively safeguard the security, availability and confidentiality of customer data.
Is the SOC 2 report available?
The SOC 2 report is available on the Cisco Trust Portal for customers with a signed NDA. This report can be used by customers to understand Umbrella security controls and see that no exceptions were identified in the audit.
https://trustportal.cisco.com/c/r/ctp/trust-portal.html?doctype=SOC&prodserv=Cisco Umbrella
Can I read a version of the report without submitting an NDA?
The SOC 3 is a public-facing version of the report and provides an overview of our security program and assurance that Umbrella has received a SOC 2 attestation. This report is available on the Umbrella website and on the Cisco Trust Portal.
https://learn-umbrella.cisco.com/solution-briefs/cisco-umbrella-soc-3-report
Feedback