Cloud Security # 7

So as we hit day 7 of things we need to address as part of cloud security we are looking at supply chain security.

This is where you need to know that your provider’s supply chain satisfactorily supports the security elements that your provider claims the service provides.

This means you need to know that the provider has addressed the following;

• How your information is shared with third party suppliers and their supply chains.

• How your provider’s procurement processes place security requirements on third party suppliers.

• How your provider manages security risks from its third party suppliers.

• How your provider manages the compliance of its suppliers with their security requirements.

• How your provider verifies that hardware and software used in the service is genuine and has not been tampered with.

Tomorrow – Secure User Management