New guidance on security for the use of Cloud services has been released by the Australian Cyber Security Centre (ACSC) and the Digital Transformation Agency.
In a joint statement, the Agencies said the Cloud Security Guidance would be of assistance to many organisations, including the Government, Cloud Service Providers (CSP), and the Information Security Registered Assessors Program.
“It will show how to perform a comprehensive assessment of a Cloud service provider and its Cloud services, so a risk-informed decision can be made about its suitability to handle an organisation’s data,” the Agencies said.
“Commonwealth entities will continue to self-assess their Cloud solutions in accordance with the guidance. They will also continue to be responsible for their own assurance and risk management activities,” they said.
They said the Information Security Registered Assessors Program would continue to support Government in maintaining its assurance and risk management activities.
Minister for Defence, Senator Linda Reynolds said the guidance would boost Australia’s cyber security resilience.
“The release of the new guidance coincides with the cessation of the Certified Cloud Services List which will open up the Australian cloud market, allowing more home-grown Australian providers to operate and deliver their services,” Senator Reynolds said.
“This will provide opportunities for Commonwealth, State and Territory Agencies to tap into a greater range of secure and cost-effective cloud services.”
Information relating to the new Cloud Security Guidance can be found at this PS News link.
