MTCS and Oracle Fusion Cloud Applications

September 25, 2023 | 3.5 Minute Read

Sharon Swathi Gaddala
Principle Regulatory Compliance Specialist | JAPAC, SaaS Compliance

We are thrilled to announce that Oracle Fusion Cloud Applications Suite achieved Multi-Tier Cloud Computing Security (MTCS), level 3 (highest level) certification on December 27, 2021, world's first cloud security standard that covers multiple tiers.

A 3rd party certification body, Ernst & Young Certify Point B.V. also an accredited certification body by Singapore Accreditation Council, completed an audit to check compliance for Oracle Fusion Cloud (“Oracle”) with internal controls against the requirements documented in SS 584:2020, Multi-Tier Cloud Computing Security Standard (MTCS).

After successful completion of the audit by Ernst & Young Certify Point B.V., Oracle Fusion Cloud (“Oracle”) was awarded with a certificate, this certificate is valid for 3 years, from December 27, 2021, to December 26, 2024. To ensure compliance and due diligence, Ernst & Young Certify Point B.V. conducts an annual surveillance audit. The audit is focused on Oracle’s information security program and compliance with standards including Infocomm Media Development Authority (IMDA) regulations.

During the audit Ernst & Young Certify Point B.V. did not identify any major non-conformances or policy deviations for Oracle’s controls related to how customers subject to compliance to MTCS when using Oracle Fusion Applications. Through this certification Oracle as a cloud service provider demonstrates sound risk management and security practices.

Our MTCS accredited certification, alongside the cloud service provider disclosure form is published and is publicly accessible from www.imda.gov.sg.

Customers are solely responsible for determining the suitability of a cloud service in the context of MTCS. This certification by Ernst & Young Certify Point B.V. is provided to aid Singapore customers in their evaluation of Oracle Fusion Applications.

Please reach out to your Sales Representative and/or Account Manager to request access to the certification. To learn more of our compliance activities, check out the Compliance page on our website and Compliance Considerations for Cloud Services blogpost.

sharon

Sharon Swathi Gaddala

Principle Regulatory Compliance Specialist with a wealthy experience in Audit and Compliance for 14 years. Sharon Swathi Gaddala manages Information Security and IT regulatory compliance activities for India and partially for Singapore, Oracle Cloud Applications.