Download Publication

In this presentation we introduce the Data Center Security (DCS) domain, which consists of fifteen control specifications essential for Cloud Service Providers (CSPs) to secure the physical infrastructure and environment hosting Cloud Service Customers' (CSCs) data and applications. This domain focuses on protecting physical assets, such as infrastructure and equipment, from security threats like unauthorized access and environmental hazards.

According to the Shared Security Responsibility Model (SSRM), CSPs are exclusively responsible for securing the datacenter’s physical infrastructure, managing environmental controls, and ensuring overall facility security. While CSCs are not directly responsible for these aspects, they should verify CSPs’ compliance with DCS controls, especially within the Audit and Assurance (A&A) domain.

This presentation will provide insights into how effective physical security measures are key to maintaining a safe and compliant cloud physical infrastructure.