Carbon Black Cloud: Does Carbon Black Have a SOC 2 Report Available?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Does Carbon Black have a SOC 2 Report available?

Environment

• Carbon Black Cloud
• Carbon Black Hosted EDR

Resolution

• SOC 1, SOC 2 and SOC 3 reports are available for VMware Cloud Services.
• SOC 1 and SOC 2 Reports require a signed non-disclosure agreement to obtain, which is arranged through the Account Team.
• The SOC 3 Report (shorter, less detailed version of the SOC 2 Report) is available for download without an NDA by visiting the Compliance section of the VMware Cloud Trust Center.

Additional Information

• System and Organizational Controls (SOC) Reports are independent third-party examination reports that demonstrate how VMware meets compliance controls and objectives.
• SOC Reports are renewed annually, approximately 12 months after the previous date of the SOC Report.
• Security Controls are audited following the AICPA SSAE-16 SOC 2 guidelines for the Security, Confidentiality, and Availability principles.