Bank of Mauritius Guideline on Use of Cloud Services (2022) 7.2.xxi: Apply the enhanced controls required for public cloud

What does 7.2.xxi require?

For public cloud the institution implements robust logical isolation so its data is virtually segregated from other tenants; the highest level of security features the provider offers, informed by international practice and standards; object-level encryption, file encryption or tokenisation on top of platform encryption for data at rest; session or data object encryption on top of platform encryption for data in motion; confidential computing that keeps sensitive data inside a protected hardware enclave while it is processed; and robust identity and access management with two-factor authentication including one-time passwords, with each request to reach public cloud services or IT assets assessed and granted on need.