Duplicated: Security and Trust BKP - SAP NS2

SAP NS2 Cloud Security

SAP NS2 Security Frameworks

Explore Authorizations, Attestations, and Environments

At SAP NS2, we place heightened importance on safeguarding your mission-critical data and operations. By complying with industry-specific security and regulatory requirements, your SAP cloud solutions are protected around the clock.

Compliance and security authorizations

Find below the compliance frameworks and security authorizations we adhere to. Our all-encompassing approach to security ensures regulated entities can adopt the innovation of SAP cloud solutions while remaining protected by the standards they demand.

Compliance Standards:

NIST SP 800-53 Security and Privacy Controls for Federal Information Systems and Organizations, April 2013
FedRAMP Moderate Security Control Baseline
DoD Cloud Computing Security Requirements Guide (SRG V.1, R.4)
Committee on National Security Systems Instruction (CNSSI) Number 1253, and Appendix F, Attachment 6 – Privacy Overlay, 25 April 2015
DFARS 252.204-7012 – Safeguarding Covered Defense Information and Cyber Incident Reporting, October 2016
FAR 52.204-21 – Basic Safeguarding of Covered Contractor Information Systems, June 2016
ISO 27001: 2013 Information Technology – Security Techniques – Information Security Management Systems – Requirements
View the Certificate
ISO 27017:2015 Information technology — Security techniques — Code of practice for information security controls based on ISO/IEC 27002 for cloud services.
View the Certificate
ISO 27018:2019 Information technology — Security techniques — Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors.
View the Certificate

Authorizations and Certifications:

ISO/IEC 27001:2013, ISO 27017:2015, and ISO/IEC 27018:2019 Certified
FedRAMP Joint Authorization Board (JAB) P-ATO
View on the FedRAMP Marketplace
DISA Provisional Authorization (PA) – FedRAMP+IL4 (SNSFS)
View on the FedRAMP Marketplace
Health Insurance Portability and Accountability Act (HIPAA) Attestation
SOC 1 Type II and SOC 2 Type II reports
Canadian Centre for Cyber Security approval for Protected B data
StateRAMP Authorization
View on the StateRAMP Authorized Product List

Commercially Regulated Environment (CRE)

Our Commercially Regulated Environment (CRE) hosts and deploys SAP commercial cloud solutions with enhanced security controls to address the specific needs of U.S. regulated industries. Deploying your SAP cloud portfolio within SAP NS2’s CRE gets you to the cloud quickly, safely, and effectively.

Industries CRE caters to:

Aerospace & Defense
Financial Services
Higher Education
Utilities
Manufacturing
Information Technology

Cloud Intelligent Enterprise Environment (CIE)

Our Cloud Intelligent Enterprise (CIE) hosts and deploys SAP commercial cloud solutions with enhanced security controls to address the specific needs of U.S. federal entities. The CIE environment was built with an emphasis on safeguarding federal and confidential information that could impact citizens wellbeing. Deploying your SAP cloud portfolio within SAP NS2’s CIE gets you to the cloud quickly, safely, and effectively.

Industries CIE caters to:

Federal Civilian
State and Local Governments
Tribal Organizations

Department of Defense Environment (DoD)

Our Department of Defense (DoD) cloud environment hosts and deploys SAP commercial cloud solutions with enhanced security controls to address the specific needs of U.S. defense agencies. The DoD environment was built was an emphasis on safeguarding Controlled Unclassified Information (CUI) that could impact those in the line of defense. Deploying your SAP cloud portfolio within SAP NS2’s DoD gets you to the cloud quickly, safely, and effectively.

Industries DoD caters to:

Defense and Military Agencies

Also of Interest