What cybersecurity certifications does Matlab hold

What 3rd party certifications available for this product such as the following...

ISO27001

CSA L2 Assessment

SOC 2 Type II

3rd Party vulnerability scan.

[John D'Errico]

Contact The MathWorks directly. Answers is a purely volunteer forum. While someone who knows the asnwer MIGHT see your question with the information, if you need that answer, then send a direct request.

https://www.mathworks.com/company/aboutus/contact_us.html?s_tid=gf_contact

[Harald]

You may find some of the information you are looking for here: https://www.mathworks.com/company/trust-center.html

Other than that, consider proceeding as suggested by John.

Answer 1

[Giordano]

While Matlab itself is not certified, The MathWorks, the company that develops Matlab, maintains a security program that references industry frameworks and holds a System and Organization Controls (SOC) report.

Here is a breakdown of The MathWorks' position regarding the certifications you mentioned:

SOC 2 Type II report

• The MathWorks has successfully completed a SOC 2 Type II examination.
• The report attests to the effectiveness of the company's internal controls related to security, availability, processing integrity, confidentiality, and privacy over a specific period.
• Customers who need to review the full SOC 2 report for due diligence can request it from MathWorks Customer Support.

ISO 27001

• The MathWorks' information security program is based on multiple industry-standard frameworks, including ISO 27001.
• Although the company's program is aligned with this standard, there is no public information indicating that The MathWorks is ISO 27001 certified.
• Some third-party companies that offer MATLAB development services may hold ISO/IEC 27001 certification, but this does not apply to The MathWorks or the MATLAB product itself.

CSA STAR L2 assessment

• There is no public record of The MathWorks completing a CSA STAR Level 2 assessment, though this type of assessment is mentioned as a potential artifact in a cyber risk assessment context.

Third-party vulnerability scanning

• The MathWorks employs full-time information and product security departments and utilizes risk management techniques to find and fix vulnerabilities.
• A third-party security risk report by UpGuard, which performs security ratings for vendors, notes that MathWorks uses strong SSL algorithms and key lengths.
• This suggests The MathWorks does undergo some form of third-party scanning or assessment to meet its security goals.

Embedded system security for specific standards

For applications involving embedded systems, such as in the automotive and industrial machinery sectors, MathWorks provides tools and kits to help users comply with industry-specific security standards, including:

• ISO/SAE 21434 (Road vehicles — Cybersecurity engineering)
• IEC 62443 (Security for industrial automation and control systems)

These tools assist customers in using MathWorks products to develop compliant systems, but they are not a certification for the Matlab software itself.