Best Practice Detail
13-8-8743
Service Providers should segregate key management from the cloud provider hosting the data, creating a chain of separation. This protects both the cloud provider and customer from conflicts when compelled to provide data due to a legal mandate.
Status: Rollover New
References/Comments: Cloud Security Alliance (CSA)
Historical events:
- Service Providers
- Cable
- Internet/Data
- Satellite
- Wireless
- Wireline
- Cyber Security
- Information Protection
- Encryption
- Intrusion Detection
- CSRIC VII: Rollover New In CSRIC VII
