Informzaschita NCC Certifies CROC Cloud Services for FSTEC Personal Data Processing Requirements
On December 30, 2021, CROC Cloud Services was awarded the highest possible security certification (level 1), allowing the cloud platform to process any type of personal data.
This will enable customers, such as medical organizations, to enjoy all public cloud benefits, including flexibility, scalability and pay-on-demand service, in full compliance with all regulatory requirements.
Without such certification, cloud platform services were limited and customers had to use dedicated equipment in data centers for personal data processing.
CROC Cloud Services prepared thoroughly for the certification to ensure its platform meets regulatory requirements and provides customers with all public cloud benefits. In order to effectively audit the company’s proprietary CROC Cloud, Card Security (Card Sec) LLC and National Certification Center (NCC LLC, part of Informzaschita Group) adjusted and expanded the certification test program. For example, Card Sec adapted the assessment methodology for evaluating operating documents, while NCC conducted the actual assessment. Despite significant complications, the work was finished as scheduled.
"CROC Cloud Services completed the certification with excellent ratings. Our assessors promptly received comprehensive and detailed answers to all questions about the system architecture and processes. The survey stage showed that all organizational and technical aspects of the platform operation are operating at a high level. Moreover, the provider did not limit its efforts to only complying with the basic established data protection level, but extended them in line with the modern landscape of cybersecurity threats," said Dmitry Poygin, CEO of NСC LLC.
"CROC Cloud certification assures customers that our infrastructure is totally secured from unauthorized access, hacks, attacks, and other incidents. This guarantee covers the whole platform and all its services, from virtual machine provisioning to Kubernetes-aaS, DataBase-aaS, and object storage," added Maxim Berezin, Business Development Director, CROC Cloud Services.