Cloud Security # 6

Moving on in our Cloud Security series and today we are looking at personnel security or ensuring that the service provider personnel who have access to your data and systems are trustworthy.

This starts to be part of the contractual requirements you have with your service provider, and also forms part of the Third Party Due diligence you should be completing on your suppliers as a regular assessment, preferably annually.

You must have confidence and your supplier should be able to demonstrate some of the following;

The level of security screening conducted on service provider staff with access to your information, or with ability to affect your service, is appropriate

The minimum number of people necessary have access to your information or could affect your service

Tomorrow – Secure Development