Service Management and System and Organization Controls (SOC) Reports

Products

• CA Service Management - Service Desk Manager
• CA Service Desk Manager
• CA Service Catalog
• CA IT Asset Manager
• CA IT Asset Manager Asset Portfolio Management
• CA Business Service Insight

Issue/Introduction

Does Service Management provide a System and Organization Controls (SOC) document/report?

Environment

Service Management

Resolution

For the ITSM suite of products, which includes Service Desk Manager, Broadcom has internal security guidelines and based on which we have static code analysis and dynamic code analysis. Also, Broadcom has Advanced Penetration testing done by a third-party audit.

Unfortunately, we DO NOT have SOC audits by a third-party and therefore do not have any SOC reports available.

In addition, since Service Management is an on-premise software solution, customer data is not maintained by Broadcom and resides with customers.