<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoPlainText>ARIN is pleased to announce that it has successfully completed the Service Organization Control (SOC) 2 Type 1 audit of its Resource Public Key Infrastructure (RPKI) as of December 2022.</p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>SOC 2 is a gold standard in security compliance developed by the American Institute of Certified Public Accountants (AICPA). ARIN worked with an independent auditing firm to complete the SOC 2 Type 1 audit, which confirms that ARIN’s information security policies and procedures include controls designed and implemented to meet the SOC 2 standards against which our community has requested we certify.</p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>ARIN has always strived to be a leader in Internet operations and becoming SOC 2 certified was the next step to help continue our mission to support the operation and growth of the Internet. We hope this allows our members to feel confident that ARIN is listening to them and making investments in our security future. And there is no more logical place to start than with ARIN’s RPKI, the key to secure routing.</p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>ARIN’s successful SOC 2 compliance demonstrates our ongoing commitment to protecting sensitive customer and organizational data from unauthorized access via its infrastructure, tools, and processes.</p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>Achieving this certification is a significant milestone in ARIN’s ongoing security efforts, but the journey is not over. We look forward to completing our SOC 2 Type 2 audit this year and will notify the community upon its completion. </p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>For more information on ARIN’s SOC 2 Type 1 certification and other security practices, please visit https://www.arin.net/security.</p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>Regards,</p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>Christian Johnson</p><p class=MsoPlainText>Chief Information Security Officer</p><p class=MsoPlainText>American Registry for Internet Numbers (ARIN)</p><p class=MsoNormal><o:p> </o:p></p></div></body></html>