Cloud has got a fair bit of attention recently and Microsoft has been keeping abreast of cyber regulation and updating its documentation as it€¦

← Back to Blog

Cloud has got a fair bit of attention recently and Microsoft has been keeping abreast of cyber regulation and updating its documentation as it relates to cloud. A significant challenge many organizations face when adopting cloud services is the implementation of the shared responsibility model. It is the model that identifies the security responsibilities of the cloud vendor and customer for the security of the applications and data stored in the cloud.

Here Microsoft discusses the adoption of Cybersecurity Framework (CSF) profiles – https://lnkd.in/erHNBwEV , the alignment to NIST SP 800-53 and the conformance of Azure Cloud Services to NIST CSF risk management. Detailing the Customer Responsibility Matrix, that lists the control requirements that customers must attend to, shared responsibility controls and those controls owned by Microsoft, by way of example.

In our paper below we discuss the CSF in more detail and how it should be implemented as part of Cybersecurity Risk Management Governance, as required by U.S and EU cyber regulations that include the SEC proposal, EN NIS 2.0 or DORA.

Ted Dziekanowski

#cybersecurity #cyberriskmanagement #csfprofiles #governance

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7051460437577469952