CRES SOC 2 Report

[BrettSmith71611]

Hi Cisco and CRES support,

Is it possible for you to provide your SOC 2 Type II compliance report, scoping Cisco Registered Envelope Service?

If you have any other security-related certification (e.g. ISO 27001, PCI-DSS), could you please provide the corresponding reports?

If a NDA is required to obtain this information, we are more than available to fill it.

Thanks in advance.

Regards,

Brett

[Mathew Huynh]

Hey Brett

With regards to the available information we publicly made available, please see:
https://trustportal.cisco.com/c/dam/r/ctp/docs/privacydatasheet/security/cisco-cres-privacy-data-sheet.pdf

If this is not the information you're seeking, i would strongly recommend to speak to your Cisco Sales/System consultants.

Thanks,

Mathew

[BrettSmith71611]

Thank you for your response. Unfortunately we already have the data privacy sheet, but our auditors are looking for an official report or attestation of the report being completed by a third party. Since the CRES service is provided free of charge we don't not have a Cisco sales/system consultant to contact. I have tried reaching out to multiple Cisco partners in my area with no success. I see where multiple certifications are listed on the data privacy sheet, but don't understand why it has been so difficult to obtain official documentation of the performed testing. Do you know of anyone specific I can contact to make any progress on this matter?