ThousandEyes Successfully Completes SOC 2 Type 2 Audit
March 28, 2016
Share this

ThousandEyes announced completion of the Service Organization Controls (SOC) 2 Type 2 audit highlighting the company's commitment to customer data security.

ThousandEyes' privacy practices regarding collection and use of personal information on the company's websites and apps were also re-certified for compliance with international privacy regulations by TRUSTe, the leading global Data Privacy Management company, through TRUSTe's Privacy Certification programs.

"Many of our customers are multinational Fortune 500 and Global 2000 companies with offices around the world. They need technology partners with robust information security and privacy management systems to minimize risks and retain compliance with laws, regulations and internal policies. This attestation is validation of our platform and our security management system," said Alexander Anoufriev, chief information security officer at ThousandEyes. "Our emphasis on security is one of the reasons that four of the top six U.S. banks and 24 of the Fortune 500 use ThousandEyes for network intelligence."

Completion of attest engagement using AT Section 101 standard and availability of the SOC 2 Type 2 report is the result of a continuous audit conducted to ensure the proper operation of security controls, which amounted to more than 150 tests over a six-month period. ThousandEyes demonstrated excellence among software as a service (SaaS) providers with a report that contained no exceptions or notes, showing remarkable data security controls and operations. The report and testing, conducted by the independent firm Schellman (formerly BrightLine CPAs & Associates), supersedes the SOC 2 Type 1 report that ThousandEyes received in September 2015, which tested the suitability of the company's design of security controls whereas SOC 2 Type 2 also verifies operating effectiveness.

In the report, Regulatory Compliance Alone Cannot Mitigate Cloud Vendor Risks, published by Gartner, written by Gayla Sullivan, Jay Heiser and Rob McMillan on February 9, 2016, it recommends that customers should regularly "obtain annual audit reports, such as the vendor's SOC 2 report, and confirmation of critical certifications, for example, ISO 27001: Information Security Management." The report adds, "Attach these certificates and attestations to the cloud vendor's risk profile each year as they are received."

Since being founded, protecting the security and privacy of customer data has been a top priority for ThousandEyes. The company has built a solid management foundation through adoption of the widely recognized and respected ISO/IEC 27001 standard for their information security management system. The ThousandEyes privacy management system is based on the Safe Harbor Framework.

Share this

The Latest

April 23, 2024

While most companies are now deploying cloud-based technologies, the 2024 Secure Cloud Networking Field Report from Aviatrix found that there is a silent struggle to maximize value from those investments. Many of the challenges organizations have faced over the past several years have evolved, but continue today ...

April 22, 2024

In our latest research, Cisco's The App Attention Index 2023: Beware the Application Generation, 62% of consumers report their expectations for digital experiences are far higher than they were two years ago, and 64% state they are less forgiving of poor digital services than they were just 12 months ago ...

April 19, 2024

In MEAN TIME TO INSIGHT Episode 5, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses the network source of truth ...

April 18, 2024

A vast majority (89%) of organizations have rapidly expanded their technology in the past few years and three quarters (76%) say it's brought with it increased "chaos" that they have to manage, according to Situation Report 2024: Managing Technology Chaos from Software AG ...

April 17, 2024

In 2024 the number one challenge facing IT teams is a lack of skilled workers, and many are turning to automation as an answer, according to IT Trends: 2024 Industry Report ...

April 16, 2024

Organizations are continuing to embrace multicloud environments and cloud-native architectures to enable rapid transformation and deliver secure innovation. However, despite the speed, scale, and agility enabled by these modern cloud ecosystems, organizations are struggling to manage the explosion of data they create, according to The state of observability 2024: Overcoming complexity through AI-driven analytics and automation strategies, a report from Dynatrace ...

April 15, 2024

Organizations recognize the value of observability, but only 10% of them are actually practicing full observability of their applications and infrastructure. This is among the key findings from the recently completed Logz.io 2024 Observability Pulse Survey and Report ...

April 11, 2024

Businesses must adopt a comprehensive Internet Performance Monitoring (IPM) strategy, says Enterprise Management Associates (EMA), a leading IT analyst research firm. This strategy is crucial to bridge the significant observability gap within today's complex IT infrastructures. The recommendation is particularly timely, given that 99% of enterprises are expanding their use of the Internet as a primary connectivity conduit while facing challenges due to the inefficiency of multiple, disjointed monitoring tools, according to Modern Enterprises Must Boost Observability with Internet Performance Monitoring, a new report from EMA and Catchpoint ...

April 10, 2024

Choosing the right approach is critical with cloud monitoring in hybrid environments. Otherwise, you may drive up costs with features you don’t need and risk diminishing the visibility of your on-premises IT ...

April 09, 2024

Consumers ranked the marketing strategies and missteps that most significantly impact brand trust, which 73% say is their biggest motivator to share first-party data, according to The Rules of the Marketing Game, a 2023 report from Pantheon ...