Elements and Performance Criteria
- Manage enterprise cloud security controls
- Manage enterprise cloud privacy and compliance
- Identify the relevant compliance regulations relating to data storage
- Determine the most relevant business continuity and data recovery plans
- Identify, secure and maintain, the relevant logs and audit trails
- Investigate and review legal, privacy and contractual issues to ensure that they meet the enterprise policy
- Review, implement and document cloud security, privacy and compliance enhancements
- Implement the appropriate changes, and integrate them into the current enterprise’s continuity of operation program (COOP)
- Establish a performance measurement program, to evaluate the security effectiveness of implemented security controls
- Provide relevant documentation as part of COOP, for audit tracking purposes