Les termes commençant par une majuscule ont la signification donnée dans le contrat applicable conclu entre le Client et Google.
Une ✔ dans le tableau ci-dessous indique que le Service (ligne) relève du champ d'application de la certification ou du rapport spécifié (colonne).
Service | Certification ISO 27001 | Certification ISO 27017 | Certification ISO 27018 | Rapport SOC 1 | Rapport SOC 2 | Rapport SOC 3 | Certification PCI DSS |
Google Security Operations | ✔ | ✔ | ✔ | ✔ | ✔ | ✔ | ✔* |
Mandiant Consulting Services | ✔ | ✔ | ✔ | ✔ | ✔ | ||
Mandiant Security Validation | ✔ | ✔ | ✔ | ✔ | ✔ | ||
Mandiant Advantage Threat Intelligence | ✔ | ✔ | ✔ | ✔ | ✔ | ||
Mandiant Attack Surface Management | ✓ | ✔ | ✓ | ✓ | ✓ | ||
Mandiant Managed Defense | ✓ | ✔ | ✓ | ✓ | ✓ | ✓ |
Service
Certification ISO 27001
Certification ISO 27017
Certification ISO 27018
Rapport SOC 1
Rapport SOC 2
Rapport SOC 3
Certification PCI DSS
Google Security Operations
✔
✔
✔
✔
✔
✔
✔*
Mandiant Consulting Services
✔
✔
✔
✔
✔
Mandiant Security Validation
✔
✔
✔
✔
✔
Mandiant Advantage Threat Intelligence
✔
✔
✔
✔
✔
Mandiant Attack Surface Management
✓
✔
✓
✓
✓
Mandiant Managed Defense
✓
✔
✓
✓
✓
✓
*Sous réserve de la configuration de service spécifique choisie par le client. Certaines fonctionnalités (par exemple, l'intégration Looker Google Security Operations) ne sont pas inclus dans la certification.