Bank of Mauritius Guideline on Use of Cloud Services (2022)

Section 7: Cloud security management – Bank of Mauritius Guideline on Use of Cloud Services (2022)

Bank of Mauritius Guideline on Use of Cloud Services (2022) 7.2.xvii: Encrypt point-to-point connectivity, use dual connectivity from Mauritius and keep logs and audit trails

What does 7.2.xvii require?

Every network link is point to point and encrypted; data centres in Mauritius that connect to the provider have two or more links from different internet service providers over different network paths; and appropriate logs and audit trails are kept.

Maintained by Gerard Blokdyk

Other controls in Section 7: Cloud security management – Bank of Mauritius Guideline on Use of Cloud Services (2022)

7.1 Determine security controls in line with risk appetite and the characteristics of the service
7.2.i Know the provider's security measures, assess vulnerabilities regularly and keep cloud controls at least as strong as on premise
7.2.iv Obtain assurance over the hypervisor and safeguard against virtualisation risks
7.2.vi Keep an inventory of IT assets on the cloud and apply proportionate identity, access and network controls
7.2.viii Encrypt data at rest and in transit and manage encryption keys under institution control
7.2.xi Segregate, protect and identify the institution's data
7.2.xii Secure containers, microservices and APIs
7.2.xv Operate an incident management process and centralised visibility over core cloud components

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Bank of Mauritius Guideline on Use of Cloud Services (2022) controls