E-MapReduce:Compliance certifications of EMR

Compliance certification

Description

ISO27018

ISO/IEC 27018 establishes a code of practice for the protection of personally identifiable information (PII), covering control objectives, controls, and implementation guidance. Based on the information security risk environment identified in ISO/IEC 27002, this standard specifies applicable PII protection requirements.

ISO27701

ISO/IEC 27701 is a widely recognized authoritative standard for building privacy information management systems. Alibaba Cloud was among the first batch of cloud service providers in the world to obtain this certification.

ISO27799

ISO 27799 provides information security management guidelines for healthcare organizations and reflects the professional standards of healthcare information security management.

ISO29151

ISO/IEC 29151 provides a variety of practical guidelines that help enterprises protect personal privacy and reduce compliance risks, meeting the requirements determined by the risk and impact assessments related to the protection of PII.

ISO9001

The ISO 9001 quality management system is an authoritative certification used to verify that an organization is capable of providing products that meet customer requirements and applicable regulatory requirements.

ISO20000

ISO/IEC 20000 is the first internationally recognized IT service management standard. Cloud services certified under ISO/IEC 20000-1:2011 establish and strictly execute standardized service processes to reduce overall IT risks.

ISO22301

The ISO 22301 business continuity management system is the only internationally recognized standard used to measure whether the service continuity capabilities of an enterprise fulfill social responsibilities and customer commitments. Alibaba Cloud has obtained the latest ISO/IEC 22301 business continuity certification.

ISO27001

ISO 27001 is an information security management system certification that is widely adopted as a global security standard.As a cloud computing service provider that has passed this certification, Alibaba Cloud has demonstrated its capabilities in fulfilling security responsibilities in multiple aspects, such as data security, network security, communication security, and operational security.

ISO27017

ISO/IEC 27017 provides a set of information security controls related to cloud services, including additional implementation guidance for the controls in ISO/IEC 27002 and cloud-specific controls with the corresponding implementation guidance.

BS10012

BS 10012 helps enterprises provide effective evidence of GDPR compliance. This standard adopts a PII management system that conforms to best practices, helping organizations ensure the legitimate use of personal information while respecting information privacy.

CSA STAR

The CSA STAR certification was jointly launched by the British Standards Institution (BSI) and the Cloud Security Alliance (CSA), an authoritative international cloud security organization. Alibaba Cloud has obtained the CSA STAR Gold certification for cloud security.

SOC

SOC reports are designed for service providers and were created by the American Institute of Certified Public Accountants (AICPA). The reports are known as Service Organization Controls (SOC) reports. The purpose of SOC reports is to provide service providers with options to deliver more relevant reports to their customers.