Compliance frameworks, security audits, and quality certifications this company maintains.
Broadcom maintains ISO 27001 certification across its infrastructure software and semiconductor design operations, governing information security management for VMware Cloud Foundation and Symantec Enterprise platforms.
Broadcom's cloud-delivered services — including Symantec Web Security Service and VMware Cloud — undergo annual SOC 2 Type II audits covering security, availability, and confidentiality controls for enterprise customers.
Symantec Enterprise Cloud achieved FedRAMP High authorization, enabling U.S. federal agencies to deploy Broadcom's DLP, CASB, and web security services for classified government workloads.
Security
Common Criteria EAL4+
CertifiedBroadcom's Symantec Data Loss Prevention and endpoint security products are evaluated at Common Criteria EAL4+ level, meeting stringent security requirements for U.S. and NATO government deployments.
Broadcom's semiconductor design and manufacturing supply chain is ISO 9001:2015 certified, covering quality management for networking chip families including Tomahawk, Trident, and Jericho series.
Broadcom's VMware and Symantec enterprise platforms are GDPR compliant, with data processing agreements and technical controls in place for European customers handling personal data under the regulation.
Broadcom complies with the California Consumer Privacy Act across its software products and enterprise services, providing data subject rights management capabilities within Symantec DLP and VMware environments.
Security
FIPS 140-2 Level 2
CertifiedBroadcom's cryptographic modules within Symantec Enterprise security products are FIPS 140-2 Level 2 validated, required for deployments in U.S. government and DoD classified environments.
Broadcom's payment and enterprise software platforms maintain PCI DSS compliance, enabling financial services customers to use VMware and Symantec infrastructure in cardholder data environments.
Broadcom maintains ITAR compliance for its semiconductor and networking chip products used in defense systems and aerospace applications, ensuring export controls on controlled technology remain in effect.