Cloud Security Architecture

Cloud data is highly sensitive for organizations. Most IT professionals believe that things change when they move to the cloud and forget their own responsibility. One must understand the shared responsibilities, so that one can better incorporate with cloud service providers to build and harden systems.

The Cloud Security Architecture review involves assessing the confidentiality, integrity, availability, authentication, authorization, accountability and privacy of information stored over cloud computing.

Cloud Security Architecture provides a detailed model of the security components and controls required to protect cloud environments, including: identity and access management; methods and controls to protect applications and data; approaches to gain and maintain visibility into compliance, threat posture, and overall security; processes for instilling security principles into cloud services development and operations; policies and governance to meet compliance standards; and physical infrastructure security components.

Security architecture review varies depending on the type of cloud model—SaaS, IaaS, PaaS, and Private Cloud—in which the provider operates. GCSS has developed and reviewed security architectures for all types of cloud models, including SaaS and PaaS providers.