MCMC MTSFB TC G017:2021 Cloud Service Providers Selection (Malaysia)
Annex D: Provider compliance checklist – MCMC MTSFB TC G017:2021 Cloud Service Providers Selection (Malaysia)

MCMC MTSFB TC G017:2021 Cloud Service Providers Selection (Malaysia) D.2: Require interoperability, portability and physical security from the provider

What does D.2 require?

The provider uses open and published APIs for interoperability and application migration; supplies all structured and unstructured data on request in industry-standard formats; uses secure, authenticated, non-clear-text standardised network protocols for data import and export and service management, documenting the interoperability and portability standards for tenants; runs a recognised virtualisation platform with standard formats such as OVF with any custom hypervisor changes documented for review; implements stringent physical and environmental perimeters (fences, walls, barriers, guards, gates, surveillance, physical authentication, reception and patrols); monitors ingress and egress with physical access control so only authorised personnel enter; obtains authorisation before relocating hardware, software or data off site; keeps policies for securely disposing of each type of equipment; and demonstrates data centre physical security aligned with industry practice.

Maintained by Gerard Blokdyk

Other controls in Annex D: Provider compliance checklist – MCMC MTSFB TC G017:2021 Cloud Service Providers Selection (Malaysia)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.