Flashcards
1.1 Making a decision
Cards in this deck (8)
- 1Making a Decision 1. Know your buisness requirementsUnderstand your use of the cloud service. Consider issues such as availability and connectivity. Identify risks which would be unacceptable or acceptable.
- 2Making a Decision 2. Understand Your InformationIdentify the information that will be processed, stored or transported by the cloud service. Understand the legal and regulatory implications.
- 3Making a Decision 3. Determine relevant Sy PrinciplesYou now know your business requirements, assess risks and determine which Cloud Sy Principles are most applicable.
- 4Making a Decision 4. Understand how the principles are implementedFind out how the cloud service claims to implement the security principles you’ve identified as relevant. Different approaches will result in different risks for you to consider.
- 5Making a Decision 5. Understand the level of assurance offeredSome suppliers offer little more than promises, others provide contracts, and some engage certified, independent assessors to validate their claims.
- 6Making a Decision 6. Identify additional mitigations to applyConsider any additional measures your organisation (as a consumer of the cloud service) can apply to help reduce risk to your applications and information.
- 7Making a Decision 7. Consider Residual RisksHaving worked through the above steps, decide whether any remaining risks are acceptable.
- 8Making a Decision 8. Continue to monitor and manageOnce in use, periodically review whether the service still meets your business and security needs.
Information
- Description
- ACA Cloud Sy Guidance Flashcards on 1.1 Making a decision, created by Matthew Cowley on 28/04/2022.
- Created by
- Matthew Cowley
- Views
- 3
- Rating