Nist Cloud Security

Cloud computing can and does mean different things to different people.

Nist cloud security.

For security authorization purposes compliance with the fedramp requirements based on nist 800 53 rev 4 low moderate high control baseline is contingent upon aws fully implementing aws only and shared controls and you implementing customer only and shared controls. I identifies a core set of security components that can be implemented in a cloud ecosystem to secure the environment the operations and the data migrated to the cloud. You have reached a national institute of standards and technology website national institute of standards and technology website. Cloud computing is a model for enabling ubiquitous convenient on demand network access to a shared pool of configurable computing resources e g networks servers storage applications and services that can be rapidly provisioned and released with minimal management effort or service provider interaction.

The common characteristics most interpretations share are on demand scalability of highly available and reliable pooled computing resources secure access to metered services from nearly anywhere and displacement of data and services from inside to outside the organization. Ii provides for each cloud actor the core set of security components that fall under their. Cloud computing security working group 1 2 objectives the nist cloud computing definition 1 is widely accepted as a valuable contribution toward providing a clear understanding of cloud computing technologies and cloud services. The purpose of this document is to define a nist cloud computing security reference architecture ncc sra a framework that.

This cloud model is composed of five essential characteristics three service. This cloud model promotes availability and is composed of five. It provides a simple and. Nist sp 800 145 the nist definition of cloud computing cloud computing saas paas iaas on demand self service reserve pooling rapid elasticity measured service software as a service platform as a service infrastructure as a service created date.

Aws is solely responsible for configuring and managing security of the cloud. Nist computer security division csd keywords. While aspects of these characteristics have been.