IBM Cloud Docs
Change log: ISMAP

Change log: ISMAP

In this change log, you can learn about the latest changes, improvements, and updates for the ISMAP Information System Security Management and Assessment Program) profile. The change log lists changes that were made, ordered by the version number.

The Information System Security Management and Assessment Program (ISMAP) is a Japanese government program to assess the security of public cloud service providers (CSP). ISMAP approves independent third-party auditors who evaluate and register CSPs and their services to ensure they meet specific security requirements set by the Japanese government, enabling agency usage without the added burden and cost of agency-led assessments.

Profile versioning

When specifications or controls are edited, removed from, or added to a profile in a way that is not compatible with the current version, a new version is released. To take advantage of the changes in a new version, update your attachments to use the newest profile version.

This profile is consistently updated and is not an exhaustive list of all the controls that might be required for every organization. Be sure to validate the available controls to determine where you might need to supplement your workloads with other security measures.

Version summary

The following table details the release dates and status of each profile version.

New attachments cannot be created on deprecated profile versions. Select the most recent version to use for your evaluation.

Table. Active versions of the ISMAP profile
Version number Release date Status
Version 1.0.0 2023-12-11 Active

Version 1.0.0

Now available
Released today, 11 December 2023, the ISMAP profile is a collection of controls designed to validate the configuration of your resources.