Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)
5.9: Communications security and virtualisation security – Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)

Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1) 5.9.1: Protect data in transmission and the computing resources on the network

What does 5.9.1 require?

In a shared-tenant or outsourced data centre, important data moving between servers and network components is encrypted with a protocol such as TLS to prevent eavesdropping; connections to cloud services over the Internet or the government network use secure protocols such as VPN or TLS and may add data-level encryption before transmission. Network firewalls, application firewalls, intrusion detection and prevention and log monitoring protect the computing resources within the B/D's control, recognising that both the client and the server side of cloud computing must be secured against external intruders and inter-cloud traffic from other tenants.

Maintained by Gerard Blokdyk

Other controls in 5.9: Communications security and virtualisation security – Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.