Tag Info

New answers tagged

2

This question verges upon opinion-based, but I'll try and provide some suggestions based on my experience (which is biased towards PCI but touches on others). It isn't specific to the cloud but I believe there's an equivalence. Some rules of thumb: Attestations / summaries are distributed, reports are generally not Policies are more likely shared than ...


0

You are absolutely correct in your first question that security controls can be categorized in many different manners, and that a particular security control could possibly fall into several of those categorizations. There is no absolute universally agreed-to set of categories either, some are older categorizations that made sense in the 1990s and 2000s, ...



Top 50 recent answers are included