CyberArk Earns New SOC 2 Type 2, SOC 3 Certifications for Identity Security Platform

Rhea-AI Summary

CyberArk has achieved new SOC 2 Type 2 and SOC 3 certifications for its identity security platform, providing customers with transparent controls. The certifications ensure that CyberArk's Identity Security Platform offers Zero Trust and least privilege with complete visibility, allowing secure access to any resource from anywhere. Various components of the platform, such as CyberArk Conjur Cloud and CyberArk Dynamic Privilege Access, received compliance this year. These certifications showcase CyberArk's commitment to protecting customer data against identity-centric threats.

Positive

• CyberArk has obtained new SOC 2 Type 2 and SOC 3 certifications for its developer and machine identity security SaaS-based products.

• The certifications enhance customer confidence by providing a transparent understanding of the controls implemented by CyberArk.

• The CyberArk Identity Security Platform enables Zero Trust and least privilege with complete visibility, ensuring secure access to resources from anywhere.

• CyberArk Conjur Cloud and CyberArk Dynamic Privilege Access achieved SOC 2 Type 2 and SOC 3 certification compliance this year.

• The certifications demonstrate CyberArk's commitment to protecting customer data and aligning with expected security standards.

Negative

• None.

NEWTON, Mass. & PETACH TIKVA, Israel--(BUSINESS WIRE)-- CyberArk (NASDAQ: CYBR), the identity security company, today announced new Service Organization Control (SOC) 2 Type 2 and SOC 3 certifications for its developer and machine identity security SaaS-based products and capabilities. These certifications, based on a trustworthy and reputable framework, help to provide customers and their auditors with a transparent understanding of the controls CyberArk has implemented to support their operations.

The CyberArk Identity Security Platform protects identities and critical assets by enabling Zero Trust and enforcing least privilege with complete visibility, ensuring that every identity can securely access any resource, located anywhere, from everywhere. CyberArk Conjur Cloud and CyberArk Dynamic Privilege Access - both components of the CyberArk Identity Security Platform - achieved SOC 2 Type 2 and SOC 3 certification compliance this year:

• CyberArk Conjur Cloud offers a standardized interface for developer and security teams with developer tools and security controls that are consistent across any cloud or on-prem environment. It integrates with a wide range of DevOps tools, container platforms (Kubernetes), and supports hybrid and multi-cloud environments.
• CyberArk Dynamic Privilege Access provisions just-in-time access to workloads running on cloud infrastructure, such as specific virtual machines.

Other certified solutions include CyberArk Cloud Entitlements Manager, CyberArk Endpoint Privilege Manager, CyberArk Privilege Cloud, CyberArk Remote Access, CyberArk Secure Cloud Access, CyberArk Secure Web Sessions and CyberArk Workforce Identity.

“CyberArk’s ongoing customer commitment is to provide them with the assurance that the CyberArk Identity Security Platform aligns with SOC-2 expected security standards, giving them the confidence that CyberArk is committed to protecting their data,” said Peretz Regev, chief product officer, CyberArk. “CyberArk aims to always be a proven and trusted partner for organizations that look to guard against identity-centric threats.”

SOC reports are standardized reports based on the Trust Services Principles established by the American Institute of CPAs (AICPA). SOC 2 Type 2 certification demonstrates that an independent auditing firm has reviewed, tested and examined CyberArk production services controls to ensure their operation is aligned with expected security standards. A SOC 3 report is a general use report of the SOC 2 reports that outlines a company’s internal controls and details how well they safeguard customer data, specifically for cloud service providers. Both reports evaluated not only how CyberArk safeguards customer data, but also how well those controls operate.

The SOC 2 and SOC 3 examinations were conducted by A-LIGN ASSURANCE (“A-LIGN”), an independent auditing firm, in accordance with the American Institute of Certified Public Accountants (AICPA).

To learn more about CyberArk’s security, reliability, privacy and compliance policies, please visit the CyberArk Trust Center.

About CyberArk

CyberArk (NASDAQ: CYBR) is the global leader in Identity Security. Centered on privileged access management, CyberArk provides the most comprehensive security offering for any identity – human or machine – across business applications, distributed workforces, hybrid cloud workloads and throughout the DevOps lifecycle. The world’s leading organizations trust CyberArk to help secure their most critical assets. To learn more about CyberArk, visit https://www.cyberark.com, read the CyberArk blogs or follow on Twitter via @CyberArk, LinkedIn or Facebook.

View source version on businesswire.com: https://www.businesswire.com/news/home/20240430570558/en/

Media:

Carissa Ryan

Press@CyberArk.com



Investors:

Erica Smith

InvestorRelations@CyberArk.com

Source: CyberArk

FAQ

What certifications did CyberArk achieve for its identity security platform?

CyberArk achieved SOC 2 Type 2 and SOC 3 certifications.

Which components of CyberArk's Identity Security Platform received compliance this year?

CyberArk Conjur Cloud and CyberArk Dynamic Privilege Access achieved SOC 2 Type 2 and SOC 3 certification compliance.

What do the SOC 2 Type 2 and SOC 3 certifications ensure?

The certifications provide customers with a transparent understanding of the controls CyberArk has implemented to support their operations.

What is the aim of CyberArk's ongoing customer commitment related to certifications?

CyberArk aims to provide customers with the assurance that the CyberArk Identity Security Platform aligns with SOC-2 expected security standards, giving them confidence in data protection.

Who conducted the SOC 2 and SOC 3 examinations for CyberArk?

The examinations were conducted by A-LIGN ASSURANCE ("A-LIGN"), an independent auditing firm, in accordance with the American Institute of Certified Public Accountants (AICPA).