Compliance Guide overview

Available in Classic and VPC

It is a service of NAVER Cloud Platform that provides information necessary for users who use NAVER Cloud Platform to respond to various compliance issues, security certification, and regulations. It provides various security certification-related certificates, review reports, and other supporting documents held by NAVER Cloud Platform. You can get relevant information about the services of NAVER Cloud Platform required to comply with compliance and the compliance standards that each service can respond to.

Various features provided by Compliance Guide

Please see below for detailed descriptions of the various features that Compliance Guide offers.

• Provides documents related to compliance and security certification (documents): check and download certificates related to required compliance or security certification
• Coverage: check the details of the part that users of NAVER Cloud Platform services must take responsibility for and perform directly when responding to compliance or security certification, the part that NAVER Cloud Platform should be responsible for and needs to do, and the part that the customer and NAVER Cloud Platform must jointly take responsibility for
• A guide to responses by service (product): indicates which items of compliance or security certification control standards each service of NAVER Cloud Platform can respond to, and guides the types of services to which compliance or security certification control standards must be applied

About Compliance Guide

Compliance Guide provides services in Korea, US, Singapore, Japan, and Germany regions. The service content is identical in the regions, and please check the following table of contents and their details for smooth use of Compliance Guide.

• Compliance Guide overview: introduction to Compliance Guide and its advantages, a guide to help compliance guide users, related resources, and FAQs
• Getting ready to use Compliance Guide: supported environments in order to use Compliance Guide, required specifications, and restrictions
• Compliance Guide scenario: a guide to the entire process of using the Compliance Guide
• Get started: how to start using Compliance Guide
  • Subscribe and unsubscribe: introduction to requesting and canceling Compliance Guide subscriptions from the NAVER Cloud Platform console
• Using Compliance Guide: instructions on how to access the NAVER Cloud Platform console and use the features available
  • KISA ISMS-P: a guide to KISA ISMS, KISA ISMS-P certification, and how to view and download related materials
  • PCI DSS: a guide to PCI DSS certification, and how to view and download related materials
  • CSAP: a guide to CSAP certification, and how to view and download related materials
  • CSA STAR: a guide to CSA STAR certification, and how to view and download related materials
  • ISO 27001: a guide to ISO 27001 certification, and how to view and download related materials
  • ISO 27017: a guide to ISO 27017 certification, and how to view and download related materials
  • ISO 27018: a guide to ISO 27018 certification, and how to view and download related materials
  • ISO 27799: a guide to ISO 27799 certification, and how to view and download related materials
  • ISO 22301: a guide to ISO 22301 certification, and how to view and download related materials
  • SOC 1: a guide to SOC 1 certification
  • SOC 2: a guide to SOC 2 certification
  • SOC3: a guide to SOC 3 certification, and how to view and download related materials
  • MTCS: a guide to MTCS certification, and how to view and download related materials
• Compliance Guide glossary: a guide to key glossary you must know when using Compliance Guide
• Compliance Guide release notes: a guide to Compliance Guide update history

Compliance Guide related resources

NAVER Cloud Platform provides various resources and guides to help you understand Compliance Guide better. If you're considering using Compliance Guide, please make good use of the resources below. The Compliance Guide related resources are as follows:

• Information security certifications: a guide to certificates held by NAVER Cloud Platform
• Compliance support: a guide to Industry-specific compliance support information
• Security notice: provides security-related reference materials and for download
• FAQ: frequently asked questions related to Compliance Guide
• Contact us: send direct inquiries in case of any unresolved questions that aren't answered by the manual.

Check FAQs first.

You can get your questions answered quickly by referring to the answers in the FAQ before reading the guide. If you haven't found the answer to your question in the FAQ below, search the guide for what you would like to know.

Q. What are the responsibilities and scope of responsibility referred to in the Compliance Guide?
A. Responsibilities referred to in the Compliance Guide refer to the duties or obligations of the entity that must meet the certification criteria (control standards). Therefore, scope of responsibility refers to who is responsible for the problems and consequences that arise when certain certification criteria are not met. To understand responsibilities and the scope of responsibility, you must understand shared responsibility. Shared responsibility (model) is a conception of responsibility and scope of responsibility in NAVER Cloud Platform, and its official name is shared responsibility on cloud. Shared responsibility on cloud means that the cloud service provider and the user fulfill their responsibilities together, dividing their respective roles to safely protect the user’s resources configured on the cloud. For this, the user's ​​responsibility area and the scope of responsibility (area) of the cloud service provider, NAVER Cloud Platform, are clearly divided. For detailed scope of classification, see Introduction > Security center > Shared responsibility on cloud on the NAVER Cloud platform portal.