Tag Info

New answers tagged


This question verges upon opinion-based, but I'll try and provide some suggestions based on my experience (which is biased towards PCI but touches on others). It isn't specific to the cloud but I believe there's an equivalence. Some rules of thumb: Attestations / summaries are distributed, reports are generally not Policies are more likely shared than ...


You are absolutely correct in your first question that security controls can be categorized in many different manners, and that a particular security control could possibly fall into several of those categorizations. There is no absolute universally agreed-to set of categories either, some are older categorizations that made sense in the 1990s and 2000s, ...

Top 50 recent answers are included