Best Practice Detail

13-8-8650

Service Providers should periodically conduct risk assessments (for their cloud) of their information security governance structure and processes, security controls, information security management processes, and operational processes.

Status: Rollover New

References/Comments: NIST 800-53 revision 3: Recommended Security Controls for Federal Information Systems and Organizations security control catalogue. Cloud Security Alliance: Security Guidance for Critical Areas of Focus in Cloud Computing V2.1

Historical events:

Network Operators
Service Providers
Cable
Internet/Data
Wireline
Cyber Security
Network Operations
Intrusion Detection
CSRIC VII: Rollover New In CSRIC VII