IBM Cloud Achieves ISMAP Compliance

IBM Cloud IaaS and PaaS attained Information System Security Management and Assessment Program (ISMAP) Registration for all public global MZR data centers.

ISMAP is a Japanese government program to assess the security of public cloud service providers (CSPs). The purpose of ISMAP is to provide a common set of security standards for CSPs to comply with as a baseline requirement for government procurement. Based on JIS Q(ISO/IEC) 27001 and 27002 on information security and JIS Q(ISO/IEC) 27017 on information security for cloud service, ISMAP introduces security requirements for the cloud domains, practices and procedures that CSPs must implement.

The Independent Administrative Agency Information-Technology Promotion Agency (IPA) provides guidance related to the implementation of controls and approves independent third-party auditors who evaluate and register CSPs and their services to ensure they meet the security requirements set by the Japanese government.

By engaging with an ISMAP-certified cloud service provider, government agencies can be assured that the CSP has implemented a robust information security program that is periodically audited.

Government departments and agencies can now accelerate their cloud transformation journey by partnering with IBM Cloud without the added burden and cost of agency-led assessments for a common set of security standards.

On March 16, 2023, IBM Cloud IaaS and PaaS registration was listed on the ISMAP website (listing is in Japanese)

IBM Cloud Services in scope

IBM Cloud Backup
IBM Cloud Bare Metal Servers
IBM Cloud Block Storage
IBM Cloud Container Registry
IBM Cloud Direct Link (on Classic “1.0”; Connect, Dedicated, Dedicated Hosting, Exchange)
IBM Cloud File Storage
IBM Cloud Hardware Security Module
IBM Cloud Kubernetes Service and Red Hat OpenShift on IBM Cloud
IBM Cloud Load Balancer
IBM Cloud Object Storage
IBM Cloud Object Storage (IaaS)
IBM Cloud Secrets Manager
IBM Cloud Virtual Servers
IBM Event Streams for IBM Cloud (Enterprise)
IBM Event Streams for IBM Cloud (Standard)
IBM Key Protect for IBM Cloud
IPSec VPN
SAP-Certified Cloud Infrastructure

Learn more

ISMAP overview on their website (in Japanese and in English)
See here for more information about ISMAP

Tina Belani

IBM Cloud Compliance Program Director

Michele Kersey

IBM Cloud Compliance Senior Product Manager

Bhushan Kelewadikar

IBM Cloud Compliance Product Manager

Success and recognition of IBM offerings in G2 Summer Reports

2 min read - IBM offerings were featured in over 1,365 unique G2 reports, earning over 230 Leader badges across various categories. This recognition is important to showcase our leading products and also to provide the unbiased validation our buyers seek. According to the 2024 G2 Software Buyer Behavior Report, “When researching software, buyers are most likely to trust information from people with similar roles and challenges, and they value transparency above other factors.” With over 90 million visitors each year and hosting more than 2.6…

Manage the routing of your observability log and event data

4 min read - Comprehensive environments include many sources of observable data to be aggregated and then analyzed for infrastructure and app performance management. Connecting and aggregating the data sources to observability tools need to be flexible. Some use cases might require all data to be aggregated into one common location while others have narrowed scope. Optimizing where observability data is processed enables businesses to maximize insights while managing to cost, compliance and data residency objectives. As announced on 29 March 2024, IBM Cloud® released its next-gen observability…

Unify and share data across Netezza and watsonx.data for new generative AI applications

3 min read - In today's data and AI-driven world, organizations are generating vast amounts of data from various sources. The ability to extract value from AI initiatives relies heavily on the availability and quality of an enterprise's underlying data. In order to unlock the full potential of data for AI, organizations must be able to effectively navigate their complex IT landscapes across the hybrid cloud. At this year’s IBM Think conference in Boston, we announced the new capabilities of IBM watsonx.data, an open…

IBM Cloud IaaS and PaaS attained Information System Security Management and Assessment Program (ISMAP) Registration for all public global MZR data centers.

IBM Cloud Services in scope

Learn more

More from Announcements

Success and recognition of IBM offerings in G2 Summer Reports

Manage the routing of your observability log and event data

Unify and share data across Netezza and watsonx.data for new generative AI applications

IBM Newsletters