OCC Completes Comprehensive Cloud Security Assessment for AWS Environment

Data-Driven Evaluation Confirms Security Controls Meet Regulatory and Industry Standards New York, 22 December, 2025–Amazon Web Services, Inc. (AWS), an Amazon.com, Inc. company (NASDAQ: AMZN), today announced that the OCC (Options Clearing Corporation), the world's largest equity derivatives clearing organization, completed a comprehensive cloud security assessment of its AWS environment. Conducted in partnership with AWS, the evaluation assessed OCC's cloud security controls against regulatory and industry standard frameworks, including NIST Cybersecurity Framework (CSF), and Regulation Systems Compliance and Integrity (RegSCI). The engagement delivered significant benefits:Data Driven Evaluation: evaluated OCC's security approach against regulatory requirements through a comprehensive review of 108 NIST Cybersecurity Framework subcategories.Enhanced Security Posture: Reinforced OCC’s security framework by incorporating leading industry standards and AWS-specific best practices.Maturity Verification: Assessed the robustness of existing cloud security controls and their ability to protect system availability."As a Systemically Important Financial Market Utility, OCC maintains the highest standards for security and operational resilience," said Matt Rathbun, Chief Security Officer at OCC. "This rigorous assessment with AWS validates our proactive approach to cloud security and ensures our controls not only meet but exceed regulatory expectations. Our commitment to operational excellence requires continuous validation and enhancement of our security frameworks.""At AWS, security is our top priority. AWS is architected to be the most secure global cloud infrastructure on which to build, migrate, and manage applications and workloads. OCC's rigorous approach to cloud security demonstrates the level of diligence required for critical financial market infrastructure," said Scott Mullins, Managing Director, Worldwide Financial Services at AWS. "By conducting this comprehensive assessment, OCC is establishing a strong foundation for secure cloud operations that protects the integrity of the U.S. options market."The enterprise-wide security evaluation supports OCC's ongoing commitment to maintaining robust security controls as the organization continues to evolve its technology infrastructure. As part of its continuous improvement of its cloud security posture, OCC has integrated the assessment findings into its security enhancement roadmap.###AWS Media Contact:AWS Public Relations aws-pr@amazon.comAbout Amazon Web ServicesSince 2006, Amazon Web Services has been the world’s most comprehensive and broadly adopted cloud. AWS has been continually expanding its services to support virtually any workload, and it now has more than 240 fully featured services for compute, storage, databases, networking, analytics, machine learning and artificial intelligence (AI), Internet of Things (IoT), mobile, security, hybrid, media, and application development, deployment, and management from 120 Availability Zones within 38 geographic regions, with announced plans for 10 more Availability Zones and three more AWS Regions in Chile, the Kingdom of Saudi Arabia, and the AWS European Sovereign Cloud. Millions of customers—including the fastest-growing startups, largest enterprises, and leading government agencies—trust AWS to power their infrastructure, become more agile, and lower costs. To learn more about AWS, visit aws.amazon.com. OCC Media Contact:OCC Public Relations PublicRelations@theocc.comAbout OCCThe Options Clearing Corporation (OCC) is the world's largest equity derivatives clearing organization. Founded in 1973, OCC is dedicated to promoting stability and market integrity by delivering clearing and settlement services for options, futures, and securities lending transactions. As a Systemically Important Financial Market Utility (SIFMU), OCC operates under the jurisdiction of the U.S. Securities and Exchange Commission (SEC), the U.S. Commodity Futures Trading Commission (CFTC), and the Board of Governors of the Federal Reserve System. OCC has more than 100 clearing members and provides central counterparty (CCP) clearing and settlement services to 20 exchanges and trading platforms. More information about OCC is available at www.theocc.com.