Download Publication

This localized version of this publication was produced from the original source material through the efforts of chapters and volunteers but the translated content falls outside of the CSA Research Lifecycle. For any questions and feedback, contact [email protected].

Preventive security controls cannot completely eliminate the possibility of critical data being compromised in a cyber attack. Therefore, organizations that utilize cloud services must ensure that they have a reliable cloud incident response strategy in place. Cloud incident response is simply the process used to manage cyber attacks in a cloud environment. There are several key aspects of a cloud incident response system that differentiate it from a non-cloud incident response system, notably in the areas of governance, shared responsibility, and visibility.

This framework created by the Cloud Incident Response Working Group serves as a go-to guide for cloud customers to effectively prepare for and manage cloud incidents. It explains how to assess an organization’s security requirements and then opt for the appropriate level of incident protection. Cloud customers will learn how to negotiate with cloud service providers, select security capabilities that are made-to-measure, and divide security responsibilities.

Key Takeaways: