controls of cyber security audits, 

3rd party rism assesments

SOC2

ISO

Cybersecurity controls are mechanisms to improve risk management by preventing, detecting and mitigating cyberthreats and attacks. Mechanisms range from physical controls, such as security guards and surveillance cameras, to technical controls, including firewalls, two-factor authentication and one-time passwords, or OTP.

Cloud security controls are methods and protocols to protect cloud environments’ data, applications, and infrastructure. They enforce security measures to prevent threats and unauthorized access. These controls comprise physical, technical, and administrative safeguards. Understanding the various controls, their applications, benefits, and associated risks will help you gain full, secure operations during and after cloud migration.

Toggle Navigation

Cyber Hub Secure The CloudWhat is Cloud Security?

What is Cloud Security?

Cloud computing is the delivery of hosted services, including software, hardware, and storage, over the Internet. The benefits of rapid deployment, flexibility, low up-front costs, and scalability, have made cloud computing virtually universal among organizations of all sizes, often as part of a hybrid/multi-cloud infrastructure architecture.

Cloud security refers to the technologies, policies, controls, and services that protect cloud data, applications, and infrastructure from threats.

What is Cloud Security?

Cloud Security is a Shared Responsibility

Cloud security is a responsibility that is shared between the cloud provider and the customer. There are basically three categories of responsibilities in the Shared Responsibility Model: responsibilities that are always the provider’s, responsibilities that are always the customer’s, and responsibilities that vary depending on the service model: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), or Software as a Service (SaaS), such as cloud email.

The security responsibilities that are always the provider’s are related to the safeguarding of the infrastructure itself, as well as access to, patching, and configuration of the physical hosts and the physical network on which the compute instances run and the storage and other resources reside.

The security responsibilities that are always the customer’s include managing users and their access privileges (identity and access management), the safeguarding of cloud accounts from unauthorized access, the encryption and protection of cloud-based data assets, and managing its security posture (compliance).