The World Bank Cloud is doubly secure. First, by relying on Amazon AWS, it provides best-in-class protections for even the most security-sensitive organizations and their data. External certifying bodies and independent security auditors have awarded Amazon AWS the long list of security accreditations listed below. Please visit AWS compliance resource page for more information.
Second, on top of Amazon AWS’ security protocols, the World Bank provides an additional layer of protection through its own additional security measures. Because its own data resides on its Cloud, the World Bank provides its Cloud the highest level of protection.
| Certifications and Assurance Programs | Amazon Web Services | |
|---|---|---|
| 1 | CIS (Center for Internet Security) | ✔ |
| 2 | CJIS (Criminal Justice Information Service) | ✔ |
| 3 | CLIA | ✔ |
| 4 | CMS Edge | ✔ |
| 5 | CMSR | ✔ |
| 6 | CSA | ✔ |
| 7 | DIACAP | ✔ |
| 8 | DISA Level 2 | ✔ |
| 9 | DNB (Netherlands) | ✔ |
| 10 | DoD SRG | ✔ |
| 11 | EAR | ✔ |
| 12 | EU Data Protection Directive | ✔ |
| 13 | EU Safe Harbor / EU Model clauses | ✔ |
| 14 | FDA 21 CFR Part 11 | ✔ |
| 15 | FedRAMP (SM) | ✔ |
| 16 | FERPA | ✔ |
| 17 | FIPS 140-2 | ✔ |
| 18 | FISC | ✔ |
| 19 | FISMA | ✔ |
| 20 | GLBA | ✔ |
| 21 | GxP | ✔ |
| 22 | HIPAA | ✔ |
| 23 | HITECH | ✔ |
| 24 | ICREA | ✔ |
| 25 | IRAP (Australia) | ✔ |
| 26 | IRS - 1075 | ✔ |
| 27 | IRS 1075 | ✔ |
| 28 | ISO 27001 | ✔ |
| 29 | ISO 27002 | ✔ |
| 30 | ISO 27017 | ✔ |
| 31 | ISO 27018 | ✔ |
| 32 | ISO 9001 | ✔ |
| 33 | ITAR | ✔ |
| 34 | IT-Grundschutz | ✔ |
| 35 | MITA 3.0 | ✔ |
| 36 | MPAA | ✔ |
| 37 | MPLS Level 3 - Multi-Level Protection Scheme (China) | ✔ |
| 38 | MTCS Tier 3 Certification | ✔ |
| 39 | My Number Act (Japan) | ✔ |
| 40 | NERC | ✔ |
| 41 | NIST 800-53 | ✔ |
| 42 | NZ GCIO | ✔ |
| 43 | PCI DSS Level 1 | ✔ |
| 44 | PDPA (Malaysia) | ✔ |
| 45 | PDPA (Singapore) | ✔ |
| 46 | PHR | ✔ |
| 47 | Privacy Act (Australia) | ✔ |
| 48 | Privacy Act (New Zealand) | ✔ |
| 49 | Privacy Shield | ✔ |
| 50 | SEC Rule 17a-4(f) | ✔ |
| 51 | SEC Rule 17a-4(f) | ✔ |
| 52 | Section 508 / VPAT | ✔ |
| 53 | SOC 1/ ISAE 3402 | ✔ |
| 54 | SOC 2 | ✔ |
| 55 | SOC 3 | ✔ |
| 56 | Spanish DPA Authorization | ✔ |
| 57 | U.K. DPA - 1988 | ✔ |
| 58 | UK Cloud Security Principles | ✔ |
| 59 | UK Cyber Essentials Plus | ✔ |
| 60 | UK G-Cloud | ✔ |
| 61 | Uptime Institute Tiers | ✔ |
| 62 | VPAT / Section 508 | ✔ |