What industry security controls and practices do Databricks follow?

[User16826994223]

What industry security controls and practices do Databricks follow?

[User16826994223]

Databricks has already implemented its own security architecture based on industry best practices. We also continuously work to achieve higher standards such as SANS Top 20 Controls for Internet Security, Consensus Audit Guidelines, NIST guidelines, and Internet standards.

Databricks also retains a security firm to identify application or network-level security issues that could adversely affect the integrity of Databricks on a regular basis.

[davidveuve]

Databricks recently also updated the Security Addendum that is incorporated into our typical contracts. It's now written in plain language, and provides detailed content around security controls and practices. https://databricks.com/security-addendum

More coming soon as well!