From the course: Cloud Security Operations by Pearson
Unlock this course with a free trial
Join today to access over 25,200 courses taught by industry experts.
Conflicting international legislation
From the course: Cloud Security Operations by Pearson
Conflicting international legislation
Cloud service consumers have to be aware of the regions in which their data is stored and their content is distributed. Cloud providers may still be subject to laws and mandates in conducting business in certain jurisdictions, even if the organization does not actually reside there. According to the CSA, they have a process for setting legal and regulatory requirements when it comes to cloud computing. Number one, realize the laws and pertinent regulations that apply to the organization. Number two, classify data or classify operations that might demand special attention. Third, institute provider contractual negotiation guiding principles. Fourth, set evaluation criteria of the service provider. For example, the Cloud Controls Matrix, CCM. And then fifth, understand requirements that are generated from contractual obligations. On the exam, we have to define treaties. Treaties are binding agreements between two political authoritative entities and nations and become that part of…
Contents
-
-
-
-
-
(Locked)
Conflicting international legislation8m 27s
-
(Locked)
Ediscovery and forensics3m 56s
-
(Locked)
Issues with PHI and PII in the cloud2m 45s
-
(Locked)
Standard privacy requirements2m 25s
-
(Locked)
Privacy impact assessments (PIAs)2m 38s
-
(Locked)
Risk treatment3m 47s
-
(Locked)
Provider risk assessment programs3m 13s
-
(Locked)
Regulatory transparency requirements3m 11s
-
(Locked)
-
-