2015.04.07
NTT Comware Obtained SOC2 - Service Organization Control Report Type 2 for its SmartCloud®Data Centers
-- Taking prompt steps towards globalization of internal control in ICT security and availability --
NTT Comware Corporation (Head office: Minato-ku, Tokyo; President: Shinobu Umino; hereinafter, NTT Comware) obtained SOC2 - Service Organization Control Report, Type 2 (*1) on March 25, 2015. The report assures the effectiveness of NTT Comware's internal control in terms of the data center services. The number of companies that have obtained SOC2 - Service Organization Control Report, Type 2 is limited. NTT Comware became the forerunner of advanced data center providers to further improve reliability of the services.
SOC2 - Service Organization Control Report assures controls at a service organization relevant to IT security and availability upon a strict evaluation by an independent auditor to confirm its compliance with the global standard of the internal control (ISAE3000iInternational Standard on Assurance Engagements 3000: Assurance Engagements other than Audits or Reviews of Historical Financial Informationj, which is considered to be highly reliable as an international standard. The report clearly states compliance with FISC (*2) Security Guidelines, which is also effective for clients of financial sectors to improve their internal and external accountability.
1.Background
With the increase of cloud services and expansion of areas of outsourcing in business processes of ICT systems, there is an increasing demand by data center users for higher reliability in the internal control of data center service providers concerning IT securities and its availability.NTT Comware obtained SOC2 - Service Organization Control Report Type 2 (evaluation period: August 1, 2014 - January 31, 2015) for its Tokyo Data Center, one of the major centers in the Tokyo metropolitan area, to meet such needs.
2.Benefits
As NTT Comware has obtained SOC2 - Service Organization Control Report Type 2, the users of NTT Comware's data center can be assured that their internal control matches the global standard in terms of IT security and availability. The service secures such benefits for corporate users.Furthermore, it is effective for clients in financial sectors to provide a highly secure service, improve its internal/external accountability and reduce extra tasks to handle evaluations of authorities or internal audits since they are able to overview the compliance rules regarding FISC Security Guidelines in a specific manner.
Saitama Data Center and Kyoto Data Center also obtained SOC1 - Service Organization Control Report [Type2](*3) (evaluation period: August 1, 2014 - January 31, 2015). NTT Comware continues to reduce the extra workload of clients for the internal control evaluation and audit, contributing to the improvement of their convenience.
3. Future Scenario
NTT Comware has been providing cloud services such as IaaS, PaaS and SaaS, including networks, as the SmartCloud brand since 2010, based on the experience of design, development, maintenance and operation of ICT communication network systems and enterprise systems for NTT group companies, which requires consistent high reliability of the systems. Such services are provided by the data centers that qualified for SOC1 and SOC2 Service Organization Control Reports as the core of the service infrastructure.NTT Comware's My Number Solution (*4), to be provided in October 2015, is also available to undertake sufficient IT security management measures without manual handling, since the highly secure Smart Cloud data centers would manage personal information.
We will continue to obtain more Service Organization Control Reports for internal control in order to meet the various needs of data center users concerning BCP, as well as to take appropriate measures for ICT security and audits.
** SmartCloud is a registered trademark of NTT Comware Corporation.
