CA Service Management and System and Organization Controls (SOC) Reports

Products

• CA Service Management - Service Desk Manager
• CA Service Catalog
• CA IT Asset Manager
• CA IT Asset Manager Asset Portfolio Management

Issue/Introduction

Does CA Service Management provide a System and Organization Controls (SOC) document/report?

Environment

CA Service Management - all versions

Resolution

For the ITSM suite of products, which includes CA Service Desk Manager, Broadcom has internal security guidelines and based on which we have static code analysis and dynamic code analysis. Also, Broadcom has Advanced Penetration testing done by a third-party audit.

Unfortunately, we DO NOT have SOC audits by a third-party and therefore do not have any SOC reports available.

In addition, since CA Service Management is an on-premise software solution, customer data is not maintained by Broadcom and resides with customers.