Call us now:
This week the NSA released their guidance on managing cloud vulnerabilities. It’s a good read and sets out what they believe are the roles and responsibilities for cloud security, between cloud service providers and customers.
There is nothing in the document which is surprising. But they have pulled it together in a simple and easy to digest way. To make it clear in their view, roles and responsibilities and the relevance and risks of security layers to a potential exploit, to help set priorities. It reminds us that cyber security in the cloud is responsibility of both the CSP and their customer in equal measure. That cloud customers should not rely solely on a cloud providers for security and that they should layer their security on top of the base foundations that the CSPs must provide.
It raises some good points around key management, insider threats and need for cloud customers to fully understand the risks of shared tenancy environments.
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6628922162952626176