Snapshot 124985
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Compliance Posture, Certifications & Attestations Current certifications, attestations, validation programs, and framework reviews maintained or pursued by cPacket. SOC 2 Type II Security, Confidentiality, and Availability Trust controls audited by an independent third party. FIPS Validated cPacket's cryptographic module and products are validated to meet U.S. federal and government security standards. View FIPS validation references below. Common Criteria (CC) cPacket's Network Observability and Security Suite of products, as a distributed system to meet NDcPP security standards. AWS Well-Architected cPacket's cCloud suite of products is designed after AWS best practices for security, reliability, and operational excellence. Trust & Company Resources Request cPacket Compliance and Security policies, plans & practices and certifications. Security Vulnerability Report a Vulnerability -> Compliance & Security Request Resources -> Compliance References Independent validation and certification references for cPacket cryptographic modules, algorithms, and entropy validation. Cryptographic Module and Entropy Certifications (CMVP) FIPS 140-2 cVu16100_TAA Certification (CMVP): #4736 FIPS 140-2 cVu16100_TAA Certification (CMVP): #4382 Entropy Validation (CMVP): E241 FIPS Cryptographic Algorithmic Certifications (CAVP) A6885 A6886 A6887 A2250 A2251 A2252 A2253 A2254 Security Controls Overview Our comprehensive security program includes continuous monitoring and implementation of industry best practices across all operational areas. Access Security Multi-factor authentication (MFA) required for all systems Role-based access control (RBAC) implementation Single sign-on (SSO) integration Quarterly access reviews Network Security Network segmentation and micro-segmentation Intrusion detection and prevention systems (IDS/IPS) Vulnerability management and patching program Periodic penetration testing and assessments Incident Response & Security Policies Information Security Policy Physical Security Policy Network Security Policy Annual security awareness training for all employees Security operations and monitoring Documented incident response procedures Rapid containment and remediation Post-incident analysis and lessons learned Confidentiality Controls Overview Our comprehensive confidentiality program includes data classification, access mechanisms, and treatment practices that are based on NIST and industry best practices. Data Classification and Protection Well-defined data classification levels (Public, Internal, Confidential, and Restricted) Secure data access, disposal, and sanitization procedures Encryption in transit and at rest Data loss prevention (DLP) mechanisms Automated backup and recovery processes Organizational Management Controlled environment policy and practices Annual reviews of policies Comprehensive change management processes Third-party security assessments and checks Risk Management & Business Continuity Overview Our enterprise risk management framework supports continuous identification, assessment, and mitigation of security and operational risks. Risk Treatment Well-defined risk assessment and scoring procedures Business impact analysis and risk treatment procedures Continuous threat landscape monitoring Vulnerability scanning and assessment Business Continuity Comprehensive business continuity planning and disaster recovery procedures Regular disaster recovery testing and validation Redundant systems and failover capabilities Crisis communication and stakeholder notification Vendor Management Comprehensive vendor security questionnaires Third-party risk assessments and due diligence Ongoing monitoring of vendor security posture Contractual security requirements and SLAs Third-Party Assessments Overview We engage independent third parties to validate our security controls and compliance posture. Independent Assessments Annual SOC 2 audits by certified public accounting firms Penetration testing by accredited cybersecurity firms Vulnerability assessments through automated and manual testing Code security reviews by peers for production / customer-facing applications Infrastructure security reviews for cloud and on-premises environments Compliance Contacts For a specific policy or plan, compliance inquiry, security question, incident report, or business continuity request, contact the appropriate cPacket team below. Compliance matters and policy or plan requests: compliance@cpacketnetworks.com Learn more about cPacket solutions. Upgrading your network observability tools? Considering AI-guided operations? Our team can answer your questions and help solve your toughest challenges. Schedule DemoContact Us