In cloud application environments, customers often ask about the security controls and operational aspects around how the vendor – in this case RSA – hosts and manages its SaaS application. The industry standard best practice for presenting this information is the Service Organization Control (SOC) certification. RSA SecurID Access has achieved Type I, Service Organization Control 2 assessment on controls (known as SOC 2 Type I) in August 2016. The report from the auditors is available upon request by reaching out to your RSA contact.
