Bank of Mauritius Guideline on Use of Cloud Services (2022)

Section 7: Cloud security management – Bank of Mauritius Guideline on Use of Cloud Services (2022)

Bank of Mauritius Guideline on Use of Cloud Services (2022) 7.1: Determine security controls in line with risk appetite and the characteristics of the service

What does 7.1 require?

The institution determines the security controls to establish in line with its risk appetite, weighing how material the service is, how critical and sensitive the information and other IT assets are, the nature of the service, data classification, data location, and the deployment and service models.

Maintained by Gerard Blokdyk

Other controls in Section 7: Cloud security management – Bank of Mauritius Guideline on Use of Cloud Services (2022)

7.2.i Know the provider's security measures, assess vulnerabilities regularly and keep cloud controls at least as strong as on premise
7.2.iv Obtain assurance over the hypervisor and safeguard against virtualisation risks
7.2.vi Keep an inventory of IT assets on the cloud and apply proportionate identity, access and network controls
7.2.viii Encrypt data at rest and in transit and manage encryption keys under institution control
7.2.xi Segregate, protect and identify the institution's data
7.2.xii Secure containers, microservices and APIs
7.2.xv Operate an incident management process and centralised visibility over core cloud components
7.2.xvii Encrypt point-to-point connectivity, use dual connectivity from Mauritius and keep logs and audit trails

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Bank of Mauritius Guideline on Use of Cloud Services (2022) controls