IBM Cloud Achieves ISMAP Compliance

IBM Cloud IaaS and PaaS attained Information System Security Management and Assessment Program (ISMAP) Registration for all public global MZR data centers.

ISMAP is a Japanese government program to assess the security of public cloud service providers (CSPs). The purpose of ISMAP is to provide a common set of security standards for CSPs to comply with as a baseline requirement for government procurement. Based on JIS Q(ISO/IEC) 27001 and 27002 on information security and JIS Q(ISO/IEC) 27017 on information security for cloud service, ISMAP introduces security requirements for the cloud domains, practices and procedures that CSPs must implement.

The Independent Administrative Agency Information-Technology Promotion Agency (IPA) provides guidance related to the implementation of controls and approves independent third-party auditors who evaluate and register CSPs and their services to ensure they meet the security requirements set by the Japanese government.

By engaging with an ISMAP-certified cloud service provider, government agencies can be assured that the CSP has implemented a robust information security program that is periodically audited.

Government departments and agencies can now accelerate their cloud transformation journey by partnering with IBM Cloud without the added burden and cost of agency-led assessments for a common set of security standards.

On March 16, 2023, IBM Cloud IaaS and PaaS registration was listed on the ISMAP website (listing is in Japanese)

IBM Cloud Services in scope

IBM Cloud Backup
IBM Cloud Bare Metal Servers
IBM Cloud Block Storage
IBM Cloud Container Registry
IBM Cloud Direct Link (on Classic “1.0”; Connect, Dedicated, Dedicated Hosting, Exchange)
IBM Cloud File Storage
IBM Cloud Hardware Security Module
IBM Cloud Kubernetes Service and Red Hat OpenShift on IBM Cloud
IBM Cloud Load Balancer
IBM Cloud Object Storage
IBM Cloud Object Storage (IaaS)
IBM Cloud Secrets Manager
IBM Cloud Virtual Servers
IBM Event Streams for IBM Cloud (Enterprise)
IBM Event Streams for IBM Cloud (Standard)
IBM Key Protect for IBM Cloud
IPSec VPN
SAP-Certified Cloud Infrastructure

Learn more

ISMAP overview on their website (in Japanese and in English)
See here for more information about ISMAP

Tina Belani

IBM Cloud Compliance Program Director

Michele Kersey

IBM Cloud Compliance Senior Product Manager

Bhushan Kelewadikar

IBM Cloud Compliance Product Manager

IBM and MuleSoft expand global relationship to accelerate modernization on IBM Power

2 min read - As companies undergo digital transformation, they rely on APIs as the backbone for providing new services and customer experiences. While APIs can simplify application development and deliver integrated solutions, IT shops must have a robust solution to effectively manage and govern them to ensure that response times and costs are kept low for all applications. Many customers use Salesforce’s MuleSoft, named a leader by Gartner® in full lifecycle API management for seven consecutive times, to manage and secure APIs across…

IBM Consulting augments expertise with AWS Competencies: A win-win for clients

3 min read - In today's dynamic economic landscape, businesses demand continuous innovation and speed of execution. At IBM Consulting®, our unwavering focus on partnerships and shared commitment to delivering enterprise-level solutions to mutual clients have been core to our success.  We are thrilled to announce that IBM® has recently gained five competencies from Amazon Web Services (AWS) in vital domains including Cloud Operations, Internet of Things (IoT), Life Sciences, Mainframe Modernization, and Telecommunications. With these credentials, IBM further establishes its position as a…

Probable Root Cause: Accelerating incident remediation with causal AI

5 min read - It has been proven time and time again that a business application’s outages are very costly. The estimated cost of an average downtime can run USD 50,000 to 500,000 per hour, and more as businesses are actively moving to digitization. The complexity of applications is growing as well, so Site Reliability Engineers (SREs) require hours—and sometimes days—to identify and resolve problems. To alleviate this problem, we have introduced the new feature Probable Root Cause as part of Intelligent Incident…

IBM Cloud IaaS and PaaS attained Information System Security Management and Assessment Program (ISMAP) Registration for all public global MZR data centers.

IBM Cloud Services in scope

Learn more

More from Announcements

IBM and MuleSoft expand global relationship to accelerate modernization on IBM Power

IBM Consulting augments expertise with AWS Competencies: A win-win for clients

Probable Root Cause: Accelerating incident remediation with causal AI

IBM Newsletters