Key updates in version three include:
- The domains have been rewritten to emphasize security, stability and privacy, ensuring corporate privacy in a multi-tenant environment.
- The guidance assumes a structural maturity in parallel with multinational cloud standards development in both structure and content.
- The extension of content included in previous versions, with practical recommendations and requirements that can be measured and audited.
- The addition of Domain 14 – Security as a Service.
“Version 3 of the Guidance aims to provide a single, comprehensive, C-level, set of best practices that deliver a stable, secure baseline for cloud operations,” said Paul Simmonds, another of the editors. “It serves as a practical, actionable road map for managers, and aims to be the most technologically comprehensive document for those in the trenches of cloud adoption.”
“This version of the Guidance builds upon the great work of contributors to our numerous other projects,” said Chris Rezek, the third editor. “It incorporates lessons learned from the CSA GRC Stack and Trusted Cloud Initiative, and the various CSA activities, to emphasize the needs for security, stability and privacy in the cloud.”
“I want to thank each and every one of our contributors, as well as our amazing editors, for their transformational work on this version of the Guidance,” said Jim Reavis, co-founder and executive director of the CSA. “This is a significant overhaul of a huge body of work, needed to keep up with the rapidly changing landscape of cloud technologies and challenges. We are proud to continue to provide the industry’s definitive body of work for practitioners looking to leverage cloud computing as part of a secure, stable environment.”