+Separation of Datasets in the Cloud Infrastructure

Separation of Datasets in the Cloud Infrastructure

Cloud customer data stored and processed on shared virtual and physical resources is securely and strictly separated according to a documented approach based on OIS-07 risk analysis to ensure the confidentiality and integrity of this data.
Additonal CriteriaResources in the storage network are segmented by secure zoning (LUN binding and LUN masking).
Supplementary Information - About the CriteriaShared resources include memory, cores and storage networks. Technical segregation (separation) of the stored and processed data of cloud customers into shared resources can be achieved through firewalls, access lists, tagging, VLANs, virtualisation and measures in the storage network (e.g. LUN binding and LUN masking). Where the adequacy and effectiveness of segregation cannot be assessed with reasonable assurance (e.g. due to complex implementation), evidence may also be provided through expert third party review results (e.g. penetration tests to validate the concept). The segregation of transmitted data is subject to control COS-06.

1. Pārskats

1.1 Atsauces

1.2 Identificētās prasības

1.3 Saistītie tiesību akti

2. Identificētās prasības

Prasības

3. Saistītie tiesību akti

Tiesību akti