+OPS.2.2.A13 Evidence of Sufficient Information Security for Cloud Usage (S)

OPS.2.2.A13 Evidence of Sufficient Information Security for Cloud Usage (S)

Cloud customers SHOULD have their cloud service providers regularly prove that the agreed security requirements are being met. Such evidence SHOULD be based on an internationally recognised set of rules (e.g. IT-Grundschutz, ISO/IEC 27001, Compliance Control Catalogue (C5), Cloud Controls Matrix of the Cloud Security Alliance). Cloud customers SHOULD check whether the scope and protection needs cover the cloud services used.

If a cloud service provider uses subcontractors to provide its cloud services, it SHOULD regularly demonstrate to its cloud customers that they are performing the necessary audits.

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Rialacháin ghaolmhara

Rialacháin

Saincheisteanna nasctha

Naisc
blocks G 0.15 Eavesdropping
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.25 Failure of Devices or Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation