Automic General Securiy Whitepaper SOC2, SOC3 ,SDLC.

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

Request to provide some security evidence related to the Automic Workload Automation mentioned below.

• Is there any document showing automic security compliance SOC2, SOC3 certificate compatibility!
• Is the SDLC process running during the development of the automic product, can you share a related document!
• Additionally, can you share a general automation security white paper?

Environment

Release : One Automation 21.0.X

Resolution

SOC 2: These certifications don't apply to the Automic product level, unless you are a SaaS. At a vendor level, Broadcom is ISO27001 certified which is essentially the same as SOC 2, with the only difference being who performs the audit. Broadcom's latest ISO27001 certificate is attached to this KB.

 

Broadcom's SSDLC document is available from here: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/security-advisories/CA-Technologies-Secure-Software-Development-Lifecycle-SSDLC/1788

 

We do not have a Common Criteria Certificate available for Automic Automation.