External Security Audits

Oracle engages third parties to independently conduct security audits of Oracle Enterprise Performance Management Cloud and create security reports, for example, SOC 1 reports (based on Statement on Standards for Attestation Engagements (SSAE) No 18), SOC 2 reports, and other independent third party reports to review the effectiveness of administrative and technical controls. The following reports are available to you in the Documents tab of My Services to satisfy your compliance requirements.

• SOC 1 Report
• SOC 2 Report
• Bridge Letter
• ISO Certificate
• Disaster Recovery Evidence Document
• Security Assessment Report