Download Publication
Who it's for:
- cloud customers
- cloud service providers
- third-party security services providers
Roles and Responsibilities of Third Party Security Services
Release Date: 11/30/2021
Working Group: Cloud Security Services Management
As we witness the broader adoption of cloud services, it is no surprise that third-party outsourced services are also on the rise. The security responsibilities are typically split between the CSPs and Cloud Service Customers (CSCs). However, in reality, third-party security services providers increasingly play essential roles, such as providing consultancy or managing security services for CSCs. They have a part in securing the cloud platform as well. For example, some SMEs (Small and Medium Enterprises) without security professionals may be unsure of how to secure their services and thus engage a Third-Party Security Service Provider (TPSSP) for consultancy.
The role of TPSSP can be pivotal in the security of these SMEs. The guidelines in this document will help cloud customers when signing Service Level Agreement(SLAs) with TPSSPs.
Understand the security roles and responsibilities of TPSSPs for:
- Identity and access management
- Cloud Workload Protection Platform
- Network Security
- Data & Storage Security
- Assessment
- Security Analytics as a Service
- Application Security
- Security Support Services
Download this Resource
Prefer to access this resource without an account? Download it now.
Share
Related resources
Related Resources
.jpeg)
.jpeg)
.jpeg)
Interested in helping develop research with CSA?
Related Certificates & Training
.png){kind=logo}
Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more
Learn more