ISO prepares a cloud security standard

ISO is preparing a special standard dedicated to cloud computing security. The main thrust of the new standard is to address organizational issues related to clouds. However, due to the complexity of the ISO approval procedures, the final version of the document should be released only in 2013.



Among the topics covered in the draft draft of the standard are cloud models and the place of cloud users and providers in them; place of clouds in security policy; information security organization; asset Management; personnel Management; physical security; operational and communications management; access control; procurement, system development and support management; incident management; business continuity management and regulatory compliance management.