Actu
Planview Enterprise Successfully Completes Cloud Security Audit SOC Type II
February 2016 by Marc Jacob
Planview® is announcing that its cloud-based portfolio and resource management solution Planview Enterprise has successfully completed the Service Organization Control 2 Type II audit. The audit serves as an important verification for Planview’s cloud customers as the software meet tough requirements for security, availability confidentiality and privacy.
The SOC 2 Type II audit is a verification that the solution matches the criteria defined by the American Institute of Certified Public Accountants (AICPA)in their Trust Services Principles for security and availability.
The Service Organization Control 2 Report is performed in accordance with AT 101, requirements for non-financial reporting by Certified Public Accountants, and based upon the Trust Services Principles. The principles predefine criteria for vendors and business owners, making it easier to know what compliance needs are required and how to evaluate cloud solutions. The principles are based on four areas: policies, communications, procedures, and monitoring. Each of the principles have defined criteria (controls) which must be met to demonstrate adherence to the principles.
The audit includes a full assessment of:
• Security: Data centers are protected against unauthorized access (both physical and logical).
• Availability: Data centers are available for operation and use as committed or agreed.
• Processing integrity: Processing is complete, accurate, timely and authorized.
• Confidentiality: Information designated as confidential is protected as committed or agreed.
• Privacy: Personal information is collected, used, retained, disclosed and destroyed in conformity with privacy principles issued by the AICPA and the Canadian Institute of Chartered Accountants (CICA).
