• Andrea Smith

  Senior Program Manager, Omnissa Customer Security Assurance

  Andrea has over 20 years of experience working in technology and technical communications, including ten years working in the areas of cloud security, privacy, and compliance. In her current role, she collaborates with Omnissa cloud operations, engineering, cloud compliance, and the Omnissa legal team, to build programs that align cloud security processes with compliance, audit, and privacy requirements. Andrea has completed hundreds of customer risk assessments, and she routinely contributes to cloud security whitepapers for Omnissa. She has also participated as a subject matter expert for the ISC2 Certified Cloud Security Professional (CCSP) standard setting workshop and has written assessment items for the CCSP exam. 

  Read More From the Author

Last year marked a major milestone for Omnissa as we completed our first audits as an independent company. We achieved certification under several internationally recognized standards for information security management and privacy, including ISO 27001, 27017, 27018, and 27701. In addition, we received our first SOC 2 Type 2 audit reports and attained PCI‑DSS certifications across our cloud portfolio.

We’re excited to build on this momentum by announcing the successful completion of two regional security assessments: IRAP (Australia) and Cyber Essentials Plus (United Kingdom).

Australian government Information Security Registered Assessor Program (IRAP)

We’re proud to share that Omnissa has successfully completed its first IRAP assessment, reinforcing our strong security posture and commitment to Australian Government standards.

Working closely with an accredited IRAP assessor provided valuable insights into our technical, governance, and operational controls. The assessment validated where our practices align with the Australian government Information Security Manual (ISM) control requirements. It also highlighted opportunities to further enhance how we protect data classified up to and including PROTECTED levels.

This process has strengthened our internal capabilities and reinforced our readiness to support government and other high‑assurance environments. To help customers evaluate whether our products align with their security requirements and risk tolerances, we have developed an executive summary of our IRAP assessment report, which includes:

• An overview of the shared responsibility model between Omnissa and our customers
• Details on our cloud service providers, including hosting locations
• A high‑level summary of our technical strengths and areas for improvement

To request a copy of the Omnissa IRAP executive summary, contact your Omnissa representative.

Cyber Essentials (United Kingdom)

For the United Kingdom (U.K.) region, Omnissa has achieved both Cyber Essentials and Cyber Essentials Plus certifications.

Cyber Essentials is a U.K. government-backed framework designed to protect organizations against a wide range of common cyber threats. Cyber Essentials Plus builds on this foundation by requiring an accredited third party to conduct external vulnerability testing to validate the effectiveness of an organization’s security controls. These assessments are conducted annually.

You can view our Cyber Essentials and Cyber Essentials Plus certifications in the Omnissa trust center.