need help in discussion topic mapping cloud security controls to existing frameworks or regulations in security architecture and design course 1 – www.savvyessaywriters.net
need help in discussion topic mapping cloud security controls to existing frameworks or regulations in security architecture and design course 1 – www.savvyessaywriters.net
Need Help in Discussion Topic:Mapping Cloud Security Controls to Existing Frameworks or Regulations.
Download the Cloud Security Alliance (CSA) Cloud Controls Matrix spreadsheet. (A quick Internet search should give you the address of the most current version for download.) Under the “Scope Applicability” heading, select a category that is applicable to the organization for which you work. For example, if your organization handle personal medical data and uses the COBIT framework, you could choose either COBIT or HIPAA/HITECH. Once you select a category, choose row from “Control Domain” Then, create a new thread in this week’s discussion with the title from column B (i.e. CCM V3.0 Control ID.) Explain the control domain, how it maps to your chosen scope, and specifically what your organization does to implement the stated control.
If you don’t know which scope applies to your organization, just use your University as your organization. As a university, we are under the domain of FERPA, So, is you choose University, you would need to choose a Control Domain and explain how it maps to FERPA, and how University implements the controls.
So, here’s an example. Let’s suppose I work for a large on-line retailer. We handle payment cards and are therefore under PCI DSS requirements. I’ll select BCR-03 control ID (Business Continuity Planning.) So I would create a new thread in this week’s discussion with the title “BCR-03.” Then I’d explain what BCR-03 is, what it maps to in PCI DSS (4.1, 4.1.1, 9.1, 9.2), and then I’d explain what my organization does to comply with this control requirement.
text books:Shostack, Adam. Threat Modeling: Designing for Security, Indianapolis, IN: Wiley, 2014
Tony UcedaVelez and Marco M. Morana
Rick Centric Threat Modeling: Process for Attack Simulation and Threat Analysis
Savvy Essay Writers
