External Security Audits

Oracle engages third parties to independently conduct security audits of Oracle Fusion Cloud Enterprise Performance Management and Oracle Enterprise Data Management Cloud and create security reports, for example, SOC 1 reports (based on Statement on Standards for Attestation Engagements (SSAE) No 18), SOC 2 reports, and other independent third party reports to review the effectiveness of administrative and technical controls. The following reports are available to you in the Oracle Cloud Console (See Accessing Compliance Reports) to satisfy your compliance requirements:

• SOC 1 Report
• SOC 2 Report
• Bridge Letter
• ISO Certificate
• Disaster Recovery Evidence Document
• Security Assessment Report