Cultivating Trust Responsibility for data security and privacy lies with our Data Security & Privacy Highlights Chief Digital Transformation Officer (CDTO), Chief Information • Pure trains 100% of employees every six months Security Officer (CISO), and our Vice President of Networking on data security and privacy protocols. & Security Engineering, who meet regularly with our CEO to • We just completed our first SOC 2 audit and certification discuss our data security program and emerging trends. In and in 2022, we plan to obtain ISO 27001 certification, addition to executive oversight, Pure runs regular penetration the international standard for information security management, tests and executes regular incident management tabletop to further bolster our data privacy and security program. exercises on its products and systems, while product teams • In 2021, we partnered with Secure Code Warrior—a security focus on vulnerability management and security initiatives. software training company—to create a gamified training program to provide engineers with additional training on writing high-quality, secure code for our products and services.
ESG Report | Pure Storage Page 13 Page 15