A critical appraisal of risk methods and frameworks
This appraisal has been produced so practitioners and decision makers can better understand…
Entries by
Cloud Security Principle 13: Audit information for users
Goals You should be: aware of the audit information that will be provided…
Risk management introduction
Risk management is about managing the impact of uncertainty on people or organisations….
Risk management and risk analysis in practice
What is risk? Risk is the impact of uncertainty on people or organisations. Risks…
Cloud Security Principle 8: Supply chain security
Cloud services often rely upon third party products and services. Consequently, if this…
Cloud Security Principle 10: Identity and authentication
Weak authentication to these interfaces may enable unauthorised access to your systems, resulting…
Cloud Security Principle 12: Secure service administration
The design, implementation and management of administration systems should follow enterprise good practice, whilst recognising…
Cloud Security Principle 14: Secure use of the service
The extent of your responsibility will vary depending on the deployment models of…
Risk management principles
The following security risk management principles are applicable to how people and organisations…
Cloud Security Principle 7: Secure development
Goals You should be confident that: New and evolving threats are reviewed and…