Continuous oversight key to managing cloud risks
Continuous oversight in the cloud is essential to identifying and managing cloud risks, and can be achieved by taking an organised approach, according to IT governance association ISACA.
A new white paper from ISACA and SecurityScorecard has identified best practices and strategies for achieving continuous oversight capabilities.
Achieving continuous oversight in the cloud requires implementing continuous internal monitoring, cloud assurance and supply chain management capabilities, according to the white paper. Another element involves continuous improvement of cloud services' security, privacy and compliance activities.
These capabilities can be used to identify cloud risks to help anticipate incidents, prevent breaches and avoid potential costs.
Continuous cloud oversight can also be used to provide senior leaders with information needed to make cost-effective risk management decisions, and to support responsibility and accountability for risk management and cloud controls.
The white paper recommends that organisations maintain a continuous cloud service assurance and oversight program that incorporates tasks including identifying business and governance drivers and strategies, aligning with enterprise policies and raising executive awareness of the importance of IT to the enterprise.
Monitoring should be adopted based on predefined metrics that can include the number of cloud services using strong encryption, the number of cloud services offering any level of access to sensitive or mission-critical data and the number of cloud services reporting security incidents, privacy breaches and non-compliance issues.
Please follow us and share on Twitter and Facebook. You can also subscribe for FREE to our weekly newsletter and quarterly magazine.
Your AI doesn't know your customers and that's a problem for growth
A company chasing after the promise of customer ROI from AI without first laying a strong...
Australia's sovereignty question has moved from storage to AI
Most Australian businesses have sorted out where their data is stored. Far fewer know who...
AI doesn't make you special: your data and infrastructure do
When every organisation is using AI, which LLM you use matters far less than how you use it.
