06 December 2011

Registry of Cloud Computing Providers' Security Controls

This week, the Cloud Security Alliance has announced its new repository of security control self -assessments for cloud computing providers.

Part of the Security Response in the Context of CSA Cloud Control Matrix )CCM) security controls SA-03 through SA-04 for Microsoft's Office 365, published on the Cloud Security Alliance (CSA) Security, Trust and Assurance Registry (STAR)

The CSA Security, Trust and Assurance Registry (STAR) lists providers who have completed and submitted a Consensus Assessments Initiative Questionnaire (CAIQ) or Cloud Controls Matrix (CCM) response to indicate their compliance with CSA best practices.

Currently only two providers are listed, but more are in progress. This will be a very helpful resource for those seeking assurance about controls from suppliers, and potentially standardise the way cloud providers publish information about their security practices, simplifying procurement processes. If you are an IaaS, PaaS or SaaS provider, the existing submissions may help your own controls development or completion of an assessment.

There is more information in the detailed FAQ and LinkedIn forum.

Posted on: 06 December 2011 at 08:59 hrs

Comments Comments (1) | Permalink | Send Send | Post to Twitter

Comments

Comments are filtered automatically and should appear shortly after they been checked.

Nice article.
Collecting the response of following cloud security survey:
http://www.surveymonkey.com/s/BNF3V65
1 Added by Rehan Posted on 11 February 2012 at 10:28 hrs
Post a comment
Confirm acceptance and understanding of the terms of use
New posts to this thread will be sent to your email address
Registry of Cloud Computing Providers' Security Controls
http://www.clerkendweller.com/2011/12/6/Registry-of-Cloud-Computing-Providers-Security-Controls
ISO/IEC 18004:2006 QR code for http://clerkendweller.com

Page http://www.clerkendweller.com/2011/12/6/Registry-of-Cloud-Computing-Providers-Security-Controls
Requested by 38.107.179.220 on Thursday, 17 May 2012 at 22:43 hrs (London date/time)

Please read our terms of use and obtain professional advice before undertaking any actions based on the opinions, suggestions and generic guidance presented here. Your organisation's situation will be unique and all practices and controls need to be assessed with consideration of your own business context.

Terms of use http://www.clerkendweller.com/page/terms
Privacy statement http://www.clerkendweller.com/page/privacy
© 2011-2012 clerkendweller.com