Cloud Security # 8

Secure User Management, what does this mean? Simply put it’s about ensuring that the cloud provider has made available tools for you to securely manage your users.

These user management interfaces and procedures make up a vital part of the security barrier, preventing unauthorised access and alteration of your resources, applications and data.

You must be confident that the following is in place;

• You know of all of the mechanisms by which the service provider would accept management or support requests from you (telephone phone, web portal, email etc.)

• Only authorised individuals from your organisation can use those mechanisms to affect your use of the service.

• Confidence that other users cannot access, modify or otherwise affect your service management

• Manage the risks of privileged access using a system such as the ‘principle of least privilege’ or ‘zero trust’

• You understand how management interfaces are protected and what functionality they expose

Tomorrow – Identity and Authentication