: Cloud NGFW for AWS Certifications
Focus
Focus

Cloud NGFW for AWS Certifications

Table of Contents

Cloud NGFW for AWS Certifications

Learn about which certifications the Cloud NGFW for AWS has earned.
Third-party auditors assess Cloud NGFW's security and compliance as part of several Palo Alto Networks compliance programs. For general information about Palo Alto Networks' adherence to global security standards, please visit the Compliance section in the Trust Center. The Trust 360 Program details the corporate-wide security, compliance, and privacy controls to protect our customers’ most sensitive data.
Cloud NGFW is now certified for environments with these compliance obligations.
ComplianceDescription
SOC 2+
Service Organization Control 2 assesses a service provider’s controls over security, availability, processing integrity, confidentiality, and privacy. SOC 2+ represents an additional level of certification against an expanded control set, including control alignment against the HIPAA Security Rule
ISO Certifications
The ISO 27000 series, consisting of ISO 27001, ISO 27017, ISO 27018, ISO 27032, and ISO 27701, provides a robust framework for implementing and managing information security systems, cloud security, data privacy in the cloud, and privacy information management systems.
Request ISO (SOA) Report
PCI DSS
The Payment Card Industry Data Security Standard (PCI DSS) is a globally recognized set of policies and procedures intended to optimize the security of credit card transactions.
CSA STAR (Level 2)
The Cloud Security Alliance STAR (Security, Trust, Assurance, and Risk) demonstrates adherence to the highest standards of cloud security by evaluating against industry best practices, enhancing trust between providers and customers.
View listing in CSA Star Registry.
IRAP
IRAP enables Australian Government customers to validate that appropriate controls are in place and determine the appropriate responsibility model for addressing the requirements of the Australian Government Information Security Manual (ISM) produced by the Australian Cyber Security Centre (ACSC).
Germany C5
Cloud Computing Compliance Controls Catalog (C5) is a German Government-backed attestation scheme introduced in Germany by the Federal Office for Information Security (BSI) to help organizations demonstrate operational security against common cyber-attacks when using cloud services.