+Guidelines and Recommendations for Cloud Customers

Guidelines and Recommendations for Cloud Customers

The Cloud Service Provider provides cloud customers with guidelines and recommendations for the secure use of the cloud service provided. The information contained therein is intended to assist the cloud customer in the secure configuration, installation and use of the cloud service, to the extent applicable to the cloud service and the responsibility of the cloud user.
The type and scope of the information provided will be based on the needs of subject matter experts of the cloud customers who set information security requirements, implement them or verify the implementation (e.g. IT, Compliance, Internal Audit). The information in the guidelines and recommendations for the secure use of the cloud service address the following aspects, where applicable to the cloud service:
• Instructions for secure configuration;
• Information sources on known vulnerabilities and update mechanisms;
• Error handling and logging mechanisms;
• Authentication mechanisms;
• Roles and rights concept including combinations that result in anelevated risk; and
• Services and functions for administration of the cloud service by privileged users.
The information is maintained so that it is applicable to the cloud service provided in the version intended for productive use.
Additonal Criteria-
Supplementary Information - About the Criteria-

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations