Can I Get a HECVAT or SOC2 Report from WP?

• 

  stcooperfullertonedu · Member · Mar 23, 2022 at 4:48 pm

  • Copy link
  • Add topic to favorites

  Hello,

  I am trying to get IT to allow us to use WordPress to host a blog. We have a domain name to use but we want WordPress to handle hosting/security/updates/etc.

  IT will not approve the purchase unless we can get an HECVAT or SOC2 report from WordPress. Is there any way to request either of these things? They are extremely particular about the formatting so the WordPress security page does not suffice.

  HECVAT: https://library.educause.edu/resources/2020/4/higher-education-community-vendor-assessment-toolkit
  SOC2: https://us.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc2report.html

  Thanks,

• 

  staff-blorbo · Staff · Mar 23, 2022 at 9:31 pm

  • Copy link

  We cannot provide these, but we can assure you that we do take security very seriously here: https://wordpress.com/support/security/