SecOps Services in Scope by Compliance Program
Last modified: June 15, 2023
Capitalized terms have the meaning stated in the applicable agreement between Customer and Google.
A ✔ in the table below indicates that the Service (row) is in scope for the specified certification or report (column).
Service |
ISO 27001 Certification |
ISO 27017 Certification |
ISO 27018 Certification |
SOC 1 Report | SOC 2 Report | SOC 3 Report | PCI DSS Certification |
Chronicle SIEM |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
|
Mandiant: |
|||||||
Mandiant Consulting |
✔ |
||||||
Automated Defense |
✔ |
||||||
Security Validation |
✔ |
||||||
Managed Defense |
✔ |
✔ |
|||||
Chronicle SOAR on GCP |
✔ |
✔ |
✔ |
✔ |
✔ |
||
Chronicle SOAR on AWS* |
✔ |
|
|
✔ |
✔ |
*SOAR legacy product.