Security and compliance certifications

更新时间:
复制 MD 格式

This topic describes the security and compliance certifications for Short Message Service and provides links to download the compliance documents.

Short Message Service builds on Alibaba Cloud's secure products and services to help customers meet regional and industry compliance requirements. By integrating its business expertise and adhering to internal and external standards, the service has earned multiple certifications from authoritative organizations worldwide.

Certification

Description

ISO 20000 Information Technology Service Management System - Alibaba Cloud Communications

This standard defines the requirements for the development, implementation, monitoring, maintenance, and continual improvement of an IT service management system. It covers service level management, incident and problem management, change management, availability management, relationship management, and configuration and release management. This certification ensures that the technical services and support from Alibaba Cloud Communications meet business needs, improve service quality and customer satisfaction, and increase operational efficiency through standardized processes.

ISO 9001 Quality Management System - Alibaba Cloud Communications

With a core principle of customer focus, this standard emphasizes identifying, managing, and optimizing key business processes to improve efficiency and effectiveness. It covers planning, implementation, monitoring, correction, and improvement activities across the entire pre-delivery product lifecycle, from requirements confirmation, design, development, and testing to sales. This certification signifies that Alibaba Cloud Communications has established systematic, standardized quality management processes. Through continuous improvement, the company ensures its product lifecycle management meets all requirements, which reduces defects and increases customer satisfaction.

ISO 27001 Information Security Management System - Alibaba Cloud Communications

This standard is one of the world's most widely recognized frameworks for information security management. It helps organizations design and implement a comprehensive management system and control measures covering organizational security, personnel security, physical security, and security technology. This certification enables Alibaba Cloud Communications to effectively manage risks across physical, network, application, data, and supply security. This protects its information assets and enhances overall business security and compliance.

ISO 27701 Privacy Information Management System - Alibaba Cloud Communications

As a privacy extension to the ISO 27001 Information Security Management System and ISO 27002 security controls, ISO 27701 integrates privacy protection principles and methods into an organization's information security framework. It includes requirements for privacy risk management, data subject rights, data sharing and transfer, privacy by design, transparency, and incident response and handling. As a cloud communications provider, Alibaba Cloud Communications implements and continually improves its privacy management controls based on this standard. This enhances the compliance of its privacy information processing and fulfills its security responsibilities.

Multi-Level Protection Scheme (MLPS) Level 3 - Alibaba Cloud Communications

The Multi-Level Protection Scheme (MLPS) is a Chinese national standard for cybersecurity. It requires network operators to protect networks from interference, damage, or unauthorized access, and to prevent network data from being leaked, stolen, or tampered with. The Alibaba Cloud Communications cloud communications system undergoes an annual MLPS assessment by an accredited third-party organization to ensure it meets national cybersecurity requirements and effectively manages its security responsibilities.