- There are 3 types of Cloud Deployments as per below:
- Cloud SaaS: On-demand software (e.g. Google Apps, Microsoft Office 365, Financial services or HR application)
- Cloud PaaS: Development Platform for Developer (e.g. Windows Azure, Heroku, OpenShift, Google App Engine, Apache Stratos)
- Cloud IaaS: Computing resources power to run application (e.g. Amazon EC2, Microsoft Azure, Rackspace, VMware)
- Cloud Security Audits are based on the following guidelines and standards:
- ISO/IEC 27002:2013
- ISO/IEC 27017:2015
- Security Guidance for Critical Areas of Focus in Cloud Computing by Cloud Security Alliance (CSA), Version 3.0
- FedRAMP Security Assessment Framework by National Institute of Standard and Technology (NIST), Version 2.1
