Publication Peer Review
Cloud Governance and Strategies - Security Guidance for Critical Areas of Focus in Cloud Computing v5
Open Until: 02/22/2024
This CCSKv5 chapter explores the criticality of governance in the cloud and how cloud computing transforms traditional governance practices. It covers the corporate cloud organizational model, the role of a Cloud Center of Excellence (CCoE), and the governance hierarchy. The chapter also discusses foundational actions such as data/asset classification and user/entity cataloging, as well as regulatory, legal, and risk-based requirements. Additionally, it introduces key frameworks, policies, and strategies, including the Shared Security Responsibility Model (SSRM), DevOps, Zero Trust, and the use of AI for cloud security.
The peer review period has concluded. Stay tuned for the release of the final document!