South Korea ISMS-P 2.10.2: Cloud security

Responsibilities with the cloud service provider are defined and written into the contract or SLA; risks are assessed by service type (SaaS, PaaS, IaaS) and a control policy sets secure configuration baselines, change approval, secure connection methods and a permission structure; cloud administrator rights are minimised by role and protected by stronger authentication, encryption, access control and audit records; and configuration changes and operation are monitored and reviewed regularly.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in 2.10 System and service security management – South Korea ISMS-P

2.10.1 Security system operation
2.10.3 Public server security
2.10.4 E-commerce and fintech security
2.10.5 Information transfer security
2.10.6 Security of work endpoints
2.10.7 Removable media management
2.10.8 Patch management
2.10.9 Malware control

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All South Korea ISMS-P controls