Flashcards
1.3 Cloud Security Principles
Cards in this deck (15)
- 1Cloud Security Principles How many cloud security principles are there to consider?14
- 2Cloud Security Principles Data in transit ProtectionUser data transiting networks should be adequately protected against tampering and eavesdropping.
- 3Cloud Security Principles Asset protection and resilienceUser data, and the assets storing or processing it, should be protected against physical tampering, loss, damage or seizure.
- 4Cloud Security Principles Separation between usersA malicious or compromised user of the service should not be able to affect the service or data of another.
- 5Cloud Security Principles Governance frameworkThe service provider should have a framework which directs its management of information. Any technical controls deployed outside of this framework will be fundamentally undermined.
- 6Cloud Security Principles Operational securityThe service needs to be operated and managed securely in order to impede, detect or prevent attacks. Good operational security should not require time consuming or expensive processes.
- 7Cloud Security Principles Personnel securityThorough screening, supported by adequate training, reduces the likelihood of accidental or malicious compromise by service provider personnel.
- 8Cloud Security Principles Secure developmentServices should be designed and developed to identify and mitigate threats to their security. Those which aren’t may be vulnerable to security issues which could compromise your data, cause loss of service or enable other malicious activity.
- 9Cloud Security Principles Supply chain securityThe service provider should ensure that its supply chain supports all of the security principles which the service claims to implement.
- 10Cloud Security Principles Secure user managementYour provider should make the tools available for you to securely manage your use of their service. Preventing unauthorised access and alteration of your resources, applications and data.
- 11Cloud Security Principles Identity and authenticationAll access to service interfaces should be constrained to authenticated and authorised individuals.
- 12Cloud Security Principles External interface protectionAll external or less trusted interfaces of the service should be identified and appropriately defended.
- 13Cloud Security Principles Secure service administrationSystems used for administration of a cloud service will have privileged access to that service. Their compromise would have significant impact.
- 14Cloud Security Principles Audit information for usersYou should be provided with the audit records needed to monitor access to your service and the data held within it.
- 15Cloud Security Principles Secure use of the serviceThe security of cloud services and the data held within them can be undermined if you use the service poorly. You will have responsibilities when using the service in order for your data protected.
Information
- Description
- ACA Cloud Sy Guidance Flashcards on 1.3 Cloud Security Principles, created by Matthew Cowley on 28/04/2022.
- Created by
- Matthew Cowley
- Views
- 1
- Rating