Further information on the use of outsourced cloud services can be found in the ‘Service continuity for online services’ section of the Guidelines for networking.
Further information on the use of outsourced gateway services can be found in the ‘Gateways’ section of the Guidelines for gateways.
Further information on managed service providers can be found in ASD’s How to manage your security when engaging a managed service provider and Questions to ask managed service providers publications.
Further information on the definition of cloud computing can be found in National Institute of Standards and Technology Special Publication 800-145, The NIST Definition of Cloud Computing.
Further information on securing cloud services can be found in the following ASD publications:
Further information on conducting security assessments of cloud service providers can be found in ASD’s Cloud assessment and authorisation and Cloud assessment and authorisation FAQ publications.
Further information on shared responsibility models for cloud services can be found in ASD’s Cloud shared responsibility model: Executive guidance publication.
Further information on the purpose of IRAP is available from ASD.
Further information on reporting cyber security incidents can be found in the ‘Reporting cyber security incidents’ section of the Guidelines for cyber security incidents.
23 controls