Kenya ICTA-8.003:2023 Cloud Computing Standard

Section 6: General requirements – Kenya ICTA-8.003:2023 Cloud Computing Standard

Kenya ICTA-8.003:2023 Cloud Computing Standard 6.2: Do not host critical applications in the public cloud

What does 6.2 require?

An MCDA keeps critical applications out of public cloud, consistent with the Systems and Applications Standard.

Maintained by Gerard Blokdyk

Other controls in Section 6: General requirements – Kenya ICTA-8.003:2023 Cloud Computing Standard

6.1 Comply with law, the information security standard and risk policies in every use of cloud
6.10 Consider a cloud solution only after a risk evaluation accepted by the chief information security officer
6.11 Use facilities rated Uptime Institute Tier III or higher, or add resiliency
6.12 Safeguard authentication, authorisation and identity and access management
6.13 Acquire cloud solutions from ICT Authority accredited providers and prioritise government cloud
6.14 Make negotiated SLA requirements supersede the master service agreement
6.3 Prepare an exit strategy when contracting with the provider
6.4 Obtain providers' latest standards-based security assurance early in procurement

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Kenya ICTA-8.003:2023 Cloud Computing Standard controls