The document discusses cloud security guidance and principles for understanding requirements, service offerings, data protection, separation of customers, governance, operations, personnel, development, supply chain management, identity and access management, interfaces, administration, auditing, and assurance. It directs the reader to a government website for more details on cloud security guidance.

1. © Crown Copyright. All rights reserved.
Chris Ulliott
Cloud Security
Technical Director and
Chief IAArchitect, CESG

2. this is
not new
© Crown Copyright. All rights reserved.

3. understand your
requirements
© Crown Copyright. All rights reserved.

4. value your
© Crown Copyright. All rights reserved.

5. principles
© Crown Copyright. All rights reserved.

6. data in transit
resilience
separation
governance
operational
personnel
dev supply chain
management
ID&A
interface protection
administration
audit
user responsibilities
© Crown Copyright. All rights reserved.

7. understand the
serviceoffering
© Crown Copyright. All rights reserved.

8. (I/P/S)aaS
© Crown Copyright. All rights reserved.

9. public
community
private or
© Crown Copyright. All rights reserved.

10. data in
transit
protection
© Crown Copyright. All rights reserved.

11. asset
protection
& resilience
© Crown Copyright. All rights reserved.

12. separation
between
customers
© Crown Copyright. All rights reserved.

13. governance
© Crown Copyright. All rights reserved.

14. operational
security
© Crown Copyright. All rights reserved.

15. personnel
security
© Crown Copyright. All rights reserved.

16. secure
development
© Crown Copyright. All rights reserved.

17. supply chain
security
© Crown Copyright. All rights reserved.

18. secure
consumer
management
© Crown Copyright. All rights reserved.

19. ID&A
© Crown Copyright. All rights reserved.

20. external
interface
protection
© Crown Copyright. All rights reserved.

21. secure
service
admin.
© Crown Copyright. All rights reserved.

22. audit
information
provision to
customers
© Crown Copyright. All rights reserved.

23. secure use
by the
consumer
© Crown Copyright. All rights reserved.

24. get
assurance
© Crown Copyright. All rights reserved.

25. assertion
© Crown Copyright. All rights reserved.

26. contractual
© Crown Copyright. All rights reserved.

27. independent
validation or
testing
© Crown Copyright. All rights reserved.

28. assurance
in the
design
© Crown Copyright. All rights reserved.

29. assured
components
© Crown Copyright. All rights reserved.

30. alternative
mitigations
© Crown Copyright. All rights reserved.

31. accept the residual
© Crown Copyright. All rights reserved.

32. get the details at:
https://www.gov.uk
/government
/collections
/cloud-security-guidance
© Crown Copyright. All rights reserved.

33. Questions
© Crown Copyright. All rights reserved.