The document outlines Adobe's approach to compliance and risk management for its cloud services. It details the Common Controls Framework (CCF) and the Adobe Secure Product Lifecycle (SPLC) as key components of their strategy. The paper discusses Adobe's compliance with various industry standards and regulations, including SOC 2, ISO 27001, FedRAMP, PCI DSS, GLBA, HIPAA, 21 CFR Part 11, and FERPA. It also highlights Adobe's governance, risk, and compliance (GRC) solution and the continuous process of maintaining compliance through audits and reviews.
documents/EFTA00289944.pdf
{}