To minimize risk, organizations must employ a methodology to identify and select enterprise-ready cloud services. The good news is that the risk of every cloud service can be measured by performing an audit of the cloud provider. To do this, IT and security teams need a standardized way to assess these services.

Based on the Cloud Security Alliance (CSA) Cloud Controls Matrix, there are five categories of attributes to evaluate: data, user and device, service, business, and legal risk. This checklist summarizes those recommendations and offers a standardized way to identify enterprise-ready cloud services. By following this checklist you’ll be able to enable utilization of the cloud for your organization while also mitigating risk.

Downloads