PDF Service Organization Controls (SOC) 3 ... - Google Cloud Platform
Service Organization Controls (SOC) 3 Report
Report on the Google Apps for Work, Google Drive for Work, Google Apps for Education, Google Cloud Platform, and Other Google Services System
Relevant to Security, Availability, Processing Integrity, and Confidentiality
For the Period 1 May 2015 to 30 April 2016
1600 Amphitheatre Parkway Mountain View, California 94043
Tel: 650.623.4000 Fax: 650.618.1806
Assertion of Management Regarding the Effectiveness of Its Controls Over the Google Apps for Work, Google Drive for Work, Google Apps for Education,
Google Cloud Platform, and Other Google Services System Based on the Trust Services Principles and Criteria for Security, Availability, Processing
Integrity, and Confidentiality
Google Inc. (the Company) maintained effective controls over the security, availability, processing integrity, and confidentiality of its Google Apps for Work, Google Drive for Work, Google Apps for Education, Google Cloud Platform, and Other Google Services System to provide reasonable assurance that:
? the Google Apps for Work, Google Drive for Work, Google Apps for Education, Google Cloud Platform, and Other Google Services System was protected against unauthorized access, use, or modification to meet the entity's commitments and system requirements
? the Google Apps for Work, Google Drive for Work, Google Apps for Education, Google Cloud Platform, and Other Google Services System was available for operation and use to meet the entity's commitments and system requirements
? the Google Apps for Work, Google Drive for Work, Google Apps for Education, Google Cloud Platform, and Other Google Services System processing was complete, valid, accurate, timely, and authorized to meet the entity's commitments and system requirements
? the Google Apps for Work, Google Drive for Work, Google Apps for Education, Google Cloud Platform, and Other Google Services System information designated as confidential was protected to meet the entity's commitments and system requirements
during the period 1 May 2015 through 30 April 2016 based on the security, availability, processing integrity, and confidentiality principles set forth in the American Institute of Certified Public Accountants' (AICPA) TSP section 100, Trust Services Principles, Criteria, and Illustrations for Security, Availability, Processing Integrity, Confidentiality, and Privacy.
The included System Description of the Google Apps for Work, Google Drive for Work, Google Apps for Education, Google Cloud Platform, and Other Google Services System identifies the aspects of the System covered by our assertion.
GOOGLE Inc.
29 July 2016
1
Ernst & Young LLP 303 Almaden Boulevard San Jose, CA 95110
Tel: +1 408 947 5500 Fax: +1 408 947 5717
Report of Independent Accountants
To the Management of Google Inc.:
We have examined management's assertion that Google Inc. (referred to hereafter as "Google") during the period 1 May 2015 through 30 April 2016, maintained effective controls to provide reasonable assurance that:
? the Google Apps for Work, Google Drive for Work, Google Apps for Education, Google Cloud Platform, and Other Google Services System was protected against unauthorized access, use, or modification to meet the entity's commitments and system requirements
? the Google Apps for Work, Google Drive for Work, Google Apps for Education, Google Cloud Platform, and Other Google Services System was available for operation and use to meet the entity's commitments and system requirements
? the Google Apps for Work, Google Drive for Work, Google Apps for Education, Google Cloud Platform, and Other Google Services System processing was complete, valid, accurate, timely, and authorized to meet the entity's commitments and system requirements
? information within the Google Apps for Work, Google Drive for Work, Google Apps for Education, Google Cloud Platform, and Other Google Services System designated as confidential was protected to meet the entity's commitments and system requirements
based on the criteria for security, availability, processing integrity and confidentiality in the American Institute of Certified Public Accountants' (AICPA) TSP Section 100, Trust Services Principles and Criteria, for Security, Availability, Processing Integrity, Confidentiality, and Privacy. This assertion is the responsibility of Google Inc.'s management. Our responsibility is to express an opinion based on our examination.
Our examination was conducted in accordance with attestation standards established by the AICPA and, accordingly, included (1) obtaining an understanding of Google Inc.'s relevant security, availability, processing integrity and confidentiality controls, (2) testing and evaluating the operating effectiveness of the controls and (3) performing such other procedures as we considered necessary in the circumstances. We believe that our examination provides a reasonable basis for our opinion.
Because of inherent limitations in controls, error or fraud may occur and not be detected. Furthermore, the projection of any conclusions, based on our findings, to future periods is subject to the risk that the validity of such conclusions may be altered because of changes made to the system or controls, the failure to make needed changes to the system or controls or deterioration in the degree of effectiveness of the controls.
A member firm of Ernst & Young Global Limited
2
In our opinion, management's assertion referred to above is fairly stated, in all material respects, based on the aforementioned criteria for security, availability, processing integrity, and confidentiality.
29 July 2016
A member firm of Ernst & Young Global Limited
3
System Description of the Google Apps for Work, Google Drive for Work, Google Apps for Education, Google Cloud Platform, and Other Google Services System
Google Overview
Google Inc. ("Google") is a global technology service provider focused on improving the ways people connect with information. Google's innovations in web search and advertising have made Google's web site one of the most viewed Internet destinations and its brand among the most recognized in the world. Google maintains one of the world's largest online index of web sites and other content, and makes this information freely available to anyone with an Internet connection. Google's automated search technology helps people obtain nearly instant access to relevant information from their vast online index.
Google offers Internet-based services and tools that user entities can access to communicate, collaborate, and work more efficiently. The following Google product offerings automatically saves all work performed by user entities (also referred to as customers) in the cloud and enable user entities to work securely, regardless of where they are in the world and what device they are using.
The protection of user-provided or user-entered data in Google's product offerings is in scope for this report. This includes the production processing locations used by these services and the related information systems and processes.
The boundary of the information system is defined by the products listed below, the infrastructure and services that support those product offerings, and the related production data center facilities that host those product offerings.
Google Apps for Work, Google Drive for Work (Google Apps Unlimited and Team Managed) and Google Apps for Education, hereafter described collectively as "Google Apps," include:
Gmail Google Calendar Google Classroom Google Contacts Google Docs
Google Apps for Work
Google Drive for Work
(Google Apps Unlimited*)
Google Drive for Work (Team Managed)
Google Apps for Education
?
?
?
?
?
?
?
?
?
?
?
?
?
?
Google Inc.?Description of the System
4
................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related download
- pdf voicemail a state
- pdf social engineering part two marketing white glove 041118
- pdf how to add your name to a ricoh address book for scanning
- pdf instructional services policy 60100 employee email policy
- pdf google employee policy manual
- pdf email statistics report 2015 2019
- pdf android support for microsoft exchange in pure google devices
- pdf email communication policy i ii iii iv
- pdf sample e mail request to participate in internet survey
- pdf google apps for government cloud email
Related searches
- credit union service organization directory
- credit union service organization cuso
- credit union service organization example
- credit union service organization list
- google cloud revenue 2018
- google cloud storage
- google cloud platform
- republican party platform pdf 2020
- human service organization examples
- service organization def
- service organization supply chains are
- naval audit service organization chart