This Coalfire report, a PCI Qualified Security Assessor (QSA), outlines the Falcon platform’s functionality with respect to PCI DSS v4, which meets all elements of requirement No. 5: "Protect all systems against malware and regularly update antivirus software or programs." In addition, the Falcon platform provides assistance with meeting four additional PCI requirements. CrowdStrike provides a PCI DSS AOC for its customers.

CrowdStrike is compliant with Service Organization Control 2 standards and provides Falcon platform customers with a SOC 2® report. The Type 2 report addresses the suitability of design and the operating effectiveness of the controls. This attestation addresses service organization’s controls relevant to security, availability, processing integrity, confidentiality, or privacy.

The Falcon platform attains both Security, Trust, Assurance, and Risk (STAR) Level 1 and STAR Level 2 within CSA STAR's public registry. CSA STAR Level 2 requires a third-party independent audit of CrowdStrike's implementation of CSA Cloud Controls Matrix (CCM) version 4.0.

The Falcon platform is authorized under the Federal Risk and Authorization Management Program (FedRAMP). In addition, CrowdStrike has achieved FedRAMP® High-Impact Level Ready status from the Joint Authorization Board (JAB).

The Falcon platform has been granted Provisional Authorizations (PA) by the DISA, meeting compliance with DoD standards to operate at and up to Impact Level 5 (IL5). This authorization allows DoD agencies and supporting organizations to use CrowdStrike without having to go through additional time and effort to vet and approve necessary security controls. View requirements here.

CrowdStrike has created a Voluntary Product Accessibility Template (VPAT) in accordance with Section 508 of the Rehabilitation Act of 1973. The VPAT for the Falcon platform is available on request to customers and validates our relentless commitment to helping our customers meet and exceed compliance standards.
See also:
Identity protection
LogScale

EDR: The Falcon platform is certified in the Spanish National Cryptologic Center (CCN) STIC Products and Services Catalog (CPSTIC) at the ‘high’ level. CrowdStrike is the only modern endpoint security platform with the highest achievable level of accreditation possible. This new designation is for both the antivirus/endpoint protection platform (EPP) and EDR categories.

CrowdStrike is fully compliant with the UK Cyber Essentials (CE) scheme, a testament to our commitment to our customers in the UK. Our Cyber Essentials certification demonstrates our dedication to implement fundamental security controls and measures, ensuring the protection of our systems and the sensitive data they hold.

CrowdStrike has been independently assessed and is registered to the Trust Information Security Assessment Exchange (TISAX) — administered and governed by the ENX Association.
TISAX and TISAX results are not intended for the general public. For more information, refer to the ENX Portal:
- Scope ID: SY936H
- Assessment ID: AM1KZ4-1

CrowdStrike's Falcon platform adheres to stringent requirements set by the German Federal Office for Information Security (BSI), providing data encryption, access controls, and comprehensive incident response capabilities. Our compliance with C5 ensures that German organizations can rely on CrowdStrike to meet rigorous security criteria, enhancing their cybersecurity posture and protecting sensitive information.

CrowdStrike was successfully assessed under the Information Security Registered Assessors Program (IRAP), demonstrating and reinforcing our commitment to safeguarding data and networks governed by the Australian government. Our IRAP compliance signifies that CrowdStrike has been rigorously tested against the Australian Government Information Security Manual (ISM) standards.

CrowdStrike has been independently assessed and certified to the new ISO/IEC 27001:2022 standard, which reflects our commitment to safeguarding information, managing risks effectively, and adhering to global security standards.

The Criminal Justice Information Services (CJIS) Security Policy describes controls to protect wireless networking, data encryption, remote access, personnel and more. CrowdStrike can support CJIS in states that have executed a CJIS Security Agreement with CrowdStrike in GovCloud.

The Falcon platform provides significant support for the CMMC 2.0 program, its objectives, and requirements. The Falcon platform supplies strong support for up to 11 of the 17 CMMC 2.0 Level 1 requirements and 80 of the 110 CMMC 2.0 Level 2 requirements. Read this report to learn how.

This Coalfire report shows how the Falcon platform supports compliance with the Federal Financial Institutions Examination Council (FFIEC). The Falcon platform was evaluated as a suitable solution to address system protection and monitoring controls required for FFIEC compliance and provides support to achieve five FFIEC objectives, addressing 17 controls within those objectives.

In this Coalfire report, the Falcon platform was verified as addressing eight key Health Insurance Portability and Accountability Act (HIPAA) technical requirements and has been independently validated to assist healthcare organizations in achieving HIPAA compliance.

An accreditation from the National Security Agency (NSA), it signifies that CrowdStrike has been certified in critical focus areas derived from industry and government best practices for cybersecurity investigation. CrowdStrike is one of only 12 organizations accredited by the NSA for National Security Cyber Assistance Program (NSCAP) Cyber Incident Response Assistance (CIRA).

This Coalfire report validates the Falcon platform as a suitable solution for addressing the system protection and monitoring controls identified in the National Institute of Standards and Technology (NIST) SP 800-53 Rev. 4 and shows that the platform helps customers implement eight separate NIST control families, covering 23 separate controls.

CrowdStrike supports customer compliance needs pertaining to CMMC (and NIST 800-171) through the features provided by the Falcon platform. Read our CMMC white paper for more details.