Die amerikanische Regierung hat im Rahmen des „Federal Risk and Authorization Management Program (FedRAMP)“ eine Guideline für Cloud Computing erarbeitet. Diese kann hier eingesehen werden. Die aktuelle Version ist 0.96. Hier einige Auszüge aus der Einleitung:
„Over the past 18 months, an inter-agency team comprised of the National Institute of Standards and Technology (NIST), General Services Administration (GSA), the CIO Council and working bodies such as the Information Security and Identity Management Committee (ISIMC), has worked on developing the Proposed Security Assessment and Authorization for U.S. Government Cloud Computing. This team evaluated security controls and multiple Assessment and Authorization models for U.S. Government Cloud Computing as outlined in this document.“
Sebastian Gerling
Consultant's Digest 
Kommentar verfassen