Cloud and cloud security is now the latest question lawmakers and policy advisors are grappling with in the U.S. But its not just the U.S that’s€¦

← Back to Blog

Cloud and cloud security is now the latest question lawmakers and policy advisors are grappling with in the U.S. But its not just the U.S that’s working to regulated cloud cybersecurity. The EU has also put forward regulation through the EU NIS 2.0 and EU DORA to regulate cloud security and to implement cybersecurity risk management.

Regulating cloud is not the issue, compliance is the biggest most significant problem that cloud customer will face. Cloud is an opportunity for many organizations and offers many benefits. However many clients one speaks to are not aware of their responsibilities vs. those of their cloud vendor under the share responsibility model. Often assuming that moving to the cloud is more secure than on-prem.

Cloud adoption can be more secure, but it relies on both the cloud vendor and customer being clear on their roles and responsibilities for cloud security. Ensuring that they have both adopted the necessary provisions to secure infrastructure, applications OS, databases and data.

Cloud regulation is being adopted by regulators, who are very much focused on cybersecurity risk management regulation and regulatory enforcement.

Ted Dziekanowski Rachel V. Rose, JD, MBA Stephen Pitt-Walker, JD, FGIA

#cybersecurity #cyberriskmanagement #cyberregulation #sharedresonsibilitymodel

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7041689210897989632