Trust Center
More information available about ICE and its line of businesses available here: https://www.ice.com/index
ICE ensures the physical and digital security of its markets, clearing houses, mortgage technology, and data through industry-leading security technology and processes. ICE’s Information Security Department consists of diverse and skilled teams that work to protect confidential data from unauthorized access, misuse, disclosure, destruction, modification or disruption.
Our security team has four distinct functions:
- IS Cybersecurity
- IS Red Team
- IS Application Security
- IS Governance, Risk, and Compliance
Due to the number of requests received from regulators, members, customers of subsidiaries, and other stakeholders, ICE does not respond to individual inquiries or questionnaires from customers regarding the security of ICE systems. Further, to protect the security and integrity of ICE environments, it is company policy that we do not share information related to internal policies and procedures with third parties. We understand that our customers, as part of their internal vendor management procedures, request information related to security process and posture from their vendors from time to time. As such, ICE shares SOC reports with our customers that independently validate our internal information security controls through this Security Portal.
Through this portal you can request documents for our general ICE business unit.
Trust Center Updates
January 26, 2024
The 2023 ICE ITGC SOC 1 Report has been released.
Bridge Letters for SOC 1 reports have been released.
The following 2023 SOC 1 Reports have been released:
IDS SOC 1 IDD SOC 1 IDD RPO SOC 1 ICE eConfirm SOC 1 IMT Encompass SOC 1
You can find each of the reports under their respective business pages in our Trust Center: https://ice.safebase.us
Bridge letters for the period of Oct 1, 2023 through Dec 31, 2023 will be available in shortly.
Please reach out to [email protected] if you have any questions.
Thank you,
The ICE Third Party Due Diligence Team
As a provider of global financial services and critical economic infrastructure, ICE is committed to cyber-resiliency internally and via third-party relationships. To efficiently provide assurance around security controls and policies to customers, regulators, and other partners, ICE and ICE subsidiaries engage independent assessors to conduct System and Organization Controls (SOC) Reports focused on information security and business process controls. We are excited to announce the release of the following 2022 SOC Reports:
- IDS SOC 1
- IDD RPO SOC 1
- ICE eConfirm SOC 1
- ICE ITGC-Only SOC 1
- ICE SOC 2
- ICE DC SOC 2
You can find each of the reports under their respective business pages in our Trust Center: https://ice.safebase.us
Bridge letters for the period of Oct 1, 2022 through Dec 31, 2022 will be available in January due to the influx of requests for bridge/gap letters through year-end.
Please reach out to [email protected] if you have any questions.
Thank you!
- The ICE Third Party Due Diligence Team
As a provider of global financial services and critical economic infrastructure, ICE is committed to cyber-resiliency internally and via third-party relationships - we are excited to announce the official launch of the ICE Security Trust Center. By using this portal, you can request access to our compliance documents, review our standardized questionnaires such as the SIG and gain a general understanding of our security posture.
Over time, our team will be making changes to this portal as we implement new tools and processes in our environment. You can use the Subscribe button to receive email notifications for when our team has an important update, such as if we have an updated compliance report or if we have a status update regarding a major security vulnerability that has been recently discovered.
-The ICE Third Party Due Diligence Team
If you need help using this Trust Center, please contact us.
If you think you may have discovered a vulnerability, please send us a note.