Introduction
WXP adheres to recognized security and privacy frameworks to help protect customer data and support established requirements for information security, privacy, and cloud services. It operates within HP’s risk management program, backed by recognized security certifications.
This article describes the certifications and attestations that apply to WXP and the supporting compliance that HP can provide to customers.
WXP is supported by the following certifications and attestations:
ISO/IEC 27001:2022
ISO/IEC 27701:2019
ISO/IEC 27017:2015
SOC 2 Type 2
ISO 27001:2022
WXP is supported by HP’s ISO/IEC 27001:2022 certification, which is independently audited by Coalfire. ISO/IEC 27001 defines requirements for establishing, implementing, maintaining, and continually improving and Information Security Management System (ISMS). The ISMS aids in safeguarding information through measures and procedures that focus on confidentiality, integrity, and availability.
The certification covers the following areas:
Information security policies
Operations security
Organization of information security
Communications security
Human resources security
System acquisition, development, and maintenance
Asset management
Supplier relationships
Access control
Information security incident management
Cryptography
Information security aspects of business continuity management
Physical and environmental security
Compliance
ISO/IEC 27701:2019
WXP is certified under ISO/IEC 27701:2019, the international standard for Privacy Information Management Systems (PIMS).
This certification supports WXP’s approach to protecting personal data in accordance with globally recognized privacy principles. It also supports alignment with EU General Data Protection Regulation (GDPR) requirements for privacy controls, data processing, and accountability.
ISO/IEC 27017:2015
ISO/IEC 27017:2015 outlines security controls and recommendations for cloud services. WXP’s ISO certification encompasses this standard as an addition to its ISO 27001 certification.
SOC 2 Type 2
WXP maintains a SOC 2 Type 2 attestation covering security, confidentiality, privacy, and availability.
SOC 2 provides customers and partners with independent verification of how HP manages, stores, and processes customer data through established and continuously applied controls.
Compliance Reports and Supporting Documentation
HP can provide the following documentation on request:
SOC 2 report
ISO certificates
Penetration test summary under non-disclosure agreement (NDA)
Related Resources
Security Overview
WXP Security Architecture
Data Collection and Privacy
Security Development, Testing, and Operations
Configure Network Access for WXP
These resources provide addition information about WXP security, data protection, compliance, and configuration.