由西云数据运营的亚马逊云科技中国（宁夏）区域云服务完成等级保护三级测评

由宁夏西云数据科技有限公司运营的亚马逊云科技中国（宁夏）区域云服务已完成网络安全等级保护三级测评，并获得了由公安机关核准颁发的“等级保护备案证明”。 西云数据始终致力于依法合规经营，把先进的亚马逊云科技云计算技术服务带给中国客户。由权威安全机构主持的等保三级测评，进一步检验了西云数据在云服务卓越运营管理以及网络安全保障方面的能力。西云数据将继续为客户提供优质、安全、稳定、可靠的云服务，全力支持企业和机构的创新发展。

AWS China (Ningxia) regional cloud service which operated by NWCD has completed MLPS (DJCP)-level 3 certification

Ningxia Western Cloud Data Technology Co., Ltd. (NWCD for short) operated AWS China (Ningxia) regional cloud service has completed DJCP (MLPS) level 3 certification, the Public Security Bureau has also approved and issued DJCP filing certificate to NWCD. NWCD has always committed to China regulation compliance while offering innovative AWS cloud computing technology services to Chinese customers. The DJCP level 3 certification led by top authoritative security agency, has demonstrated and accredited the operation excellence and capability of NWCD in cloud service operational management and cyber security. NWCD will continue to provide customers with high-quality, secure, stable and reliable cloud services, and empower more business customer to achieve the innovation and development.

西云数据获得可信云认证

宁夏西云数据科技有限公司获得中国信息通信研究院和数据中心联盟联合颁发的可信云服务评估证书。这标志着西云数据已达到权威云服务评测系统的认证标准，从数据安全、服务质量、权益保障等多方面为用户提供可信、安全的云服务。

西云数据将持续完善现有产品功能，提升综合云服务技术能力，满足市场的变化需求，致力于为用户提供安全可信、持续可靠、可持续发展的云服务，助力用户安全无忧上云。

NWCD accredited with trusted cloud certification (TRUCS)

Ningxia Western Cloud Data Technology Co., Ltd. (NWCD for short) has obtained the TRUCS service certification issued by CAICT. This demonstrates that NWCD has achieved accreditation on leading industry standard, and can offer customers with reliable and secure cloud services from data security, service quality, customer rights protection.

NWCD will continue enhance on product service portfolio, improve cloud platform technology capabilities, embrace demands following market dynamics, and provide customers with secure, reliable, and sustainable cloud services.

西云数据获得 ISO27001 和 ISO9001 认证

宁夏西云数据科技有限公司通过权威机构测评，获得信息安全管理体系标准 ISO27001 和质量管理体系标准 ISO9001 两项认证。这标志着西云数据已建立有效的信息安全和质量管理体系。西云数据将始终秉承对信息安全与质量管理的高标准要求，为客户带来优质、安全、稳定、可靠的云服务，助力企业和机构的创新发展。

NWCD obtained ISO27001 and ISO9001 certificate

Ningxia Western Cloud Data Technology Co., Ltd. (NWCD for short) has passed assessment by authoritative organizations and obtained two industry certifications on ISO27001 information security management system standard and ISO 9001 quality management system standard. These certifications demonstrate that NWCD has established an effective information security and quality management system. NWCD will always commit to bring customers with high-quality, secure, stable and reliable cloud services by implementing industry high standard of information security and quality management to help more customers to accomplish innovation and business development.

西云数据获得 ISO27018 认证

宁夏西云数据科技有限公司通过权威机构的现场测评，获得 ISO27018 管理体系的认证。

ISO27018 是目前国际上第一个指导公有云服务供应商如何保护云用户个人可识别信息(PII)安全的国际标准，主要针对云服务商对云中个人数据和隐私的安全防护的标准认证，是公有云个人隐私数据保护方面的首个国际标准，得到了全球广泛认可。

西云数据将继续秉承国内外信息安全、数据隐私法律法规的发展趋势及要求，不断为用户提供更加安全的公有云服务。

NWCD obtained ISO27018 certificate

Ningxia Western Cloud Data Technology Co., Ltd. (NWCD for short) obtained ISO27018 management system certification by authoritative organizations.

ISO27018 is the first widely recognized international standard to guide the public cloud service providers how to protect the personal identifiable information (PII) security and privacy for customers in cloud.

NWCD will continue to follow industry standards and local to improve protection on personal information and privacy, and continue to provide customers with more secure public cloud services.

西云数据获得 ISO22301 和 ISO20000 认证

宁夏西云数据科技有限公司通过北京赛西认证有限责任公司的现场审核，获得 ISO22301 业务持续性体系和 ISO20000 信息技术服务管理体系两项认证。这是西云数据又获得的两个重量级管理体系认证，标志着西云数据在业务持续性管理及IT服务管理方面迈上新的台阶。

西云数据将继续秉承对业务持续性管理与 IT 服务管理体系的高标准要求，为客户带来优质、安全、稳定、可靠的云服务，助力企业和机构的创新发展。

NWCD obtained ISO22301 and ISO20000 certificates

Ningxia Western Cloud Data Technology Co., Ltd. (NWCD for short) has passed the on-site audit and been awarded by CESI with two new certifications of ISO22301 business continuity management system standard and ISO20000 information technology service management system standard. These two heavy weighted industry certifications demonstrate that NWCD has achieved a higher level on business continuity management and IT service management.

NWCD will continue commit to high standard on business continuity management and IT service management system, offer customers with high-quality, secure, stable and reliable cloud services, and empower more enterprises and institutions to achieve more innovation and business growth.

西云数据获得 ISO 27017 云服务信息安全控制实践规范认证

宁夏西云数据科技有限公司通过权威机构的现场测评，获得 ISO/IEC 27017:2015 云服务信息安全控制实践规范管理体系的认证。

ISO/IEC 27017 标准是建立在 ISO 27001 信息安全管理体系和 ISO 27002 作为最佳实践控制设置的坚实基础之上的信息安全控制措施标准。

通过 ISO 27017 的认证，证明西云数据建立了更加完善的云安全管理体系，有效地提升了整体云安全服务能力。

NWCD obtained ISO 27017 certificate

Ningxia Western Cloud Data Technology Co., Ltd. (NWCD for short) obtained ISO 27017 management system certification by authoritative organizations.

ISO / IEC 27017 is an international standard for guidance on the implementation of information security control measures based on the ISO 27001 Information Security Management System and ISO 27002 as best practice control settings.

NWCD obtaining the ISO 27017 certification, which means NWCD has established a more stabilized cloud security management system and enhance the cloud security service capabilities for NWCD customers.

西云数据获得 ISO27701 认证

宁夏西云数据科技有限公司通过权威机构的现场测评，获得 ISO/IEC27701 隐私信息管理体系的认证。ISO/IEC27701 是 ISO/IEC 27001 和 ISO/IEC 27002 在隐私保护体系领域的权威扩展，为企业在建立、实施、维护和持续改进隐私安全管理体系方面提供指南。未来 ISO/IEC27701 标准更专注于隐私保护的特定领域(PIMS-Specific)，实现信息安全管理与隐私信息管理的紧密整合。获得 ISO/IEC27701 的认证，证明西云数据遵循并实施了符合隐私安全标准要求的最佳实践，建立了用户在上云过程中对西云隐私保护能力的信任。

NWCD obtained ISO27701 certificate

Ningxia Western Cloud Data Technology Co., Ltd. (NWCD for short) obtained ISO/IEC27701 Privacy information management system（PIMS）certification by authoritative organizations.

ISO/IEC27701 is extended from ISO/IEC 27001 and ISO/IEC 27002 of international information security standard focused on the privacy protection, and provides world class guideline for the establishment, implementation, maintenance and continuous improvement of privacy security management system. As an extension of ISO / IEC27001 and ISO / IEC27002 in management, ISO / IEC 27701 will focus on the specific area of privacy protection (PIMS specific) in the future, to realize the integration of information security management and privacy information management.

NWCD's ISO/IEC27701 certification proves that NWCD has met the requirements of international privacy security standard,which further increases customers' trust in NWCD's ability on privacy protection through our cloud service cycle.

SOC 报告

2019年，宁夏西云数据科技有限公司的云服务体系先后获得由权威机构出具的SOC1 Type1、SOC1 Type2、SOC2 Type1、SOC2 Type2以及 SOC3鉴证报告。

SOC报告的全称为“服务机构控制体系鉴证”（System and Organization Controls，简称SOC）报告，其内容框架和格式由美国注册会计师协会（AICPA）制定。SOC报告提供了一个有效的方式，通过一个独立的第三方审计机构根据所适用的标准执行鉴证程序进而给出意见报告，帮助服务机构的用户了解服务机构的某些控制以完成自己的内部风控。SOC报告分为以下三种类型：

● SOC1报告主要提供财务报告相关的内部控制信息。

● SOC2报告主要提供信托服务标准相关的内部控制信息。

● SOC3报告亦主要提供信托服务标准相关的内部控制信息，与SOC2报告不同的是，SOC3报告的使用者是一般公众。

SOC报告可帮助客户理解西云数据云服务体系控制措施的有效性，这些控制为实现西云数据的相关控制目标及服务承诺和系统需求提供了合理保证。

西云数据每年例行邀请第三方机构进行两次SOC审计并发布报告。报告鉴证期间为连续的12个月，即每年的5月1日至10月31日以及每年的11月1日至次年4月30日，最新的报告通常在每年的1月中旬及7月中旬发布。

西云数据将持续努力，全力保障客户信息安全和保密，为客户提供优质、安全、稳定、可靠的云服务，全力支持企业和机构在中国市场的创新发展。

SOC Report

Since 2019, Ningxia Western Cloud Data Technology Co. Ltd. (NWCD) has obtained SOC1 Type1/SOC2 Type1/SOC1 Type2/SOC2 Type2/SOC3 Assurance Reports in respect of NWCD’s Cloud Services System issued by an authoritative organization.

The SOC (System and Organization Controls, “SOC”) report is an assurance report issued based on the framework and format defined by American Institute of Certified Public Accountants (“AICPA”). It is an efficient way that an independent third party performs assurance procedures and expresses its opinion in accordance with applicable standards to provide valuable information that users need to assess and address the risks associated with an outsourced service. There are three different types of SOC reports:

● SOC1 is “Report on Controls at a Service Organization Relevant to User Entities’ Internal Control over Financial Reporting (ICFR)”.

● SOC2 is “Report on Controls at a Service Organization Relevant to Trust Services Criteria”.

● SOC3 is also “Report on Controls at a Service Organization Relevant to Trust Services Criteria”, and is different from SOC 2, in that SOC 3 is a General Use Report”.

These SOC reports can help customers understand the effectiveness of NWCD’s controls to achieve the related control objectives and the service commitments and system requirements.

NWCD routinely invites third-party organizations to conduct SOC assess and issue reports twice a year. The report validation period is 12 consecutive months, i.e. from1st May to 31st October of the current year and 1st November of the current year to 30th April of the next year, with the latest reports usually issued in -January and -July each year.

NWCD will make continuous efforts to fully ensure the security and confidentiality of customer information, provide customers with excellent, secure, stable and reliable cloud services and fully support the innovation and development of Chinese companies and institutions.

西云数据获得 PCI DSS 支付卡行业数据安全标准认证

宁夏西云数据科技有限公司通过权威机构的现场测评，获得 PCI-DSS 安全认证。 PCI DSS（Payment Card Industry Data Security Standard）支付卡行业数据安全标准，由支付卡行业安全标准委员会制定，是目前全球范围唯一且最为权威的支付卡行业数据安全标准。

西云数据通过 PCI DSS 认证，这标志着西云数据为客户提供了安全可靠的支付服务保障，确保了客户的个人信息和财务数据的安全。

NWCD obtained PCI DSS Certificate

Ningxia Western Cloud Data Technology Co., Ltd. (NWCD for short) obtained PCI DSS security certification by authoritative organizations.

Payment Card Industry Data Security Standard (PCI DSS) launched by PCI Security Standards Council, it is the only and most authoritative payment card industry data security standard in the world.

NWCD has obtained PCI DSS certification, it indicates that NWCD provides customers with secure and reliable payment service guarantee and ensures the security of their personal information and financial data.

西云数据获得 CSA STAR（CCM V4）认证

宁夏西云数据科技有限公司已获得云安全联盟 （CSA） 安全信任保证和风险（STAR）CCM V4 标准认证。云时代的到来，给人们生活、商业模式等带来巨大改变。作为国际公认的云服务商安全资质，CSA STAR 认证是信息安全管理体系 ISO/IEC27001 在云计算领域的增强版，结合云控制矩阵（Cloud Control Matrix）、成熟度等级评价模型，以及相关法律法规和标准要求，对云计算服务进行全方位严格的安全性评价。

获得 CSA STAR （CCM V4）认证表明，西云数据满足 CSA 云控制矩阵标准对云安全至关重要的要求，不断提高云安全管理水平，更好地满足了顾客的云安全要求。CSA STAR 认证为由西云数据运营的亚马逊云科技中国（宁夏）区域的客户验证了云计算服务产品的最佳实践使用情况和安全状况，西云数据的运营为客户提供了一个值得信赖的云计算服务平台，满足全球权威标准的要求。

NWCD obtained CSA STAR (CCM V4) Certificate

Ningxia Western Cloud Data Technology Co., Ltd. (NWCD for short) obtained Cloud Security Alliance (CSA) Security Trust Assurance and Risk (STAR) CCM V4 standard certification. The advent of the cloud era has brought great changes to people's lives and business models. As an internationally recognized cloud service provider security qualification, CSA STAR certification is an enhanced version of ISO/IEC 27001 Information Security Management System in the field of cloud computing and combines the CCM (Cloud Control Matrix), Maturity Level Evaluation Model, relevant Laws, Regulations and Standards, to conduct a comprehensive and rigorous security evaluation of cloud computing services.

The CSA STAR (CCM V4) certification demonstrates that the NWCD conforms to the requirements critical to cloud security as outlined in the CSA Cloud Controls Matrix criteria, continuously improves the cloud security management level and better fulfils the cloud security requirements of customers. CSA STAR certification verifies the best practice usage and security posture of cloud computing services for customers in the Amazon Web Services China (Ningxia) Region operated by NWCD. The operation by NWCD provides customers with a reliable cloud computing service platform that meets the requirements of authoritative global standards.

西云数据获得 TISAX 可信信息安全评估交换认证

宁夏西云数据科技有限公司通过权威机构的现场测评，获得德国汽车行业 TISAX（Trusted Information Security Assessment Exchange 可信信息安全评估交换）认证。

TISAX 可信信息安全评估交换是基于 ISO 27001 信息安全管理体系标准和 VDA-ISA 信息安全评价而建立的汽车行业专用信息安全标准，为汽车行业内不同服务商提供了信息安全评估结果互认的模式。获得这一认证标志着汽车行业客户可以安全的把自己的应用搭建在由西云数据运营的亚马逊云科技中国(宁夏)区域上。

西云数据已通过 TISAX 最高保护级别（Assessment Level 3）的审核并取得认证标签（Info Very High; Special Data; Very High Availability; Strictly Confidential）。可登录 ENX 官网（Welcome to the ENX Portal · ENX Portal）查看 TISAX 评估结果。

NWCD obtained TISAX certificate

Ningxia Western Cloud Data Technology Co., Ltd. (NWCD for short) obtained TISAX (Trusted Information Security Assessment Exchange) certificate of German automobile industry by authoritative organizations.

TISAX (Trusted Information Security Assessment Exchange) is a special information security standard for the automotive industry based on ISO 27001 Information security management system standard and VDA-ISA information security assessment. It provides a model for mutual recognition of information security assessment results for different service providers in the automotive industry. Obtaining TISAX certification indicates that automotive industry organizations can securely build applications and services in the Amazon Web Services China (Ningxia) Region, operated by NWCD.

NWCD has passed the audit of TISAX with highest Assessment Level 3 and obtained the TISAX label (Info Very High; Special Data; Very High Availability; Strictly Confidential). Business customers can log in to ENX official website (Welcome to the ENX Portal · ENX Portal) to obtain the TISAX assessment result.