Cloud Security Architecture

If your organization operates in Germany or elsewhere in Europe, you’ve probably run into C5:2020 — the Cloud Computing Compliance Criteria Catalogue published by Germany’s Federal Office for Information Security (BSI). It’s one of the more rigorous cloud security standards in the region, and until now, proving you met it meant doing most of the … Read more

Seven years on from when I first wrote about cloud security architecture on this site, the fundamentals haven’t changed — but almost everything around them has. The cloud providers have matured, the threats have evolved, and the regulatory landscape has tightened considerably. If I were starting a security architecture engagement at a financial services organisation … Read more