CISA Cloud Security Technical Reference Architecture v2.0
Section 4: Cloud migration – CISA Cloud Security Technical Reference Architecture v2.0

CISA Cloud Security Technical Reference Architecture v2.0 4.6: Invest in people: train, hire, procure, support staff and give timely access

What does 4.6 require?

The agency invests in the people who deliver cloud projects through external classes, certifications, study time, modern project management training and sandbox environments where experimentation and failing fast are allowed; hires experienced cloud staff, using shared subject matter expert qualification assessments and pay and bonus options; procures contractors through the digital acquisition resources; trains all personnel on the new tools and the changed security paradigm including phishing and data handling; breaks down silos between development and stakeholders; and provides timely access so that staff do not create shadow IT.

Maintained by Gerard Blokdyk

Other controls in Section 4: Cloud migration – CISA Cloud Security Technical Reference Architecture v2.0

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.