The shared responsibility environment of Cloud computing is a scenario were both parties, the customer and the Cloud provider, have the responsibility for managing the IT environment. Customers have the responsibility to manage the guest Operating Systems including updates and Security, other associated application software as well as the configuration of any software security...
Read more »
Tags: Amazon, audit, Availability, AWS, compliance, ISO 27001, PCI, risk, SAS 70, SLA, Uptime
Posted in Audit, Cloud Computing | No Comments »
After the SAS 70 and ISO 27001 certifications, Amazon continues its work towards a safer infrastructure with a new Risk and Compliance White Paper. They already have in place a well developed AWS security white paper which describes the physical and operational security principles and practices. Briefly, it covers a description of the shared...
Read more »
Tags: Amazon, AWS, certifications, compliance, ISO 27001, risk, SAS 70, security practices
Posted in Cloud Computing, Security Governance | No Comments »
One of the major players in cloud computing – Amazon, are SAS 70 compliant. A small step forward towards safer environments as many commented but I see it as an important move – well done Amazon! As I stated in previous articles, cloud computing has to proof that that it is getting safer and...
Read more »
Tags: cloud computing, SAS 70, service providers, Type II
Posted in Audit, Cloud Computing, Security Governance | No Comments »