Central Bank of Jordan Cloud Computing Guideline (2018)
The Central Bank of Jordan cloud computing guideline for supervised banks and financial companies: governance, policy, risk management, contract and service level agreement terms, supervision of the provider and Central Bank access, data security and encryption, access management and monitoring, business continuity, change management, data sovereignty and termination planning.
Central Bank of Jordan Cloud Computing Guideline (2018) is a compliance framework from Jordan with 9 domains and 25 controls. The largest domains are 2.5: Contracts, agreements and the cloud service level agreement – Central Bank of Jordan Cloud Computing Guideline (2018) (5 controls), 2.7: Data security – Central Bank of Jordan Cloud Computing Guideline (2018) (4 controls), 2.3: Cloud computing policy – Central Bank of Jordan Cloud Computing Guideline (2018) (3 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (9)
2.10 and 2.11: Business continuity and change management – Central Bank of Jordan Cloud Computing Guideline (2018)
| Code | Title |
|---|---|
| central-bank-of-jordan-cloud-computing-guideline-2018::2.10 | Secure business continuity for the assigned services |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.11 | Agree change management arrangements with the provider |
2.12 and 2.13: Data sovereignty and termination plan – Central Bank of Jordan Cloud Computing Guideline (2018)
| Code | Title |
|---|---|
| central-bank-of-jordan-cloud-computing-guideline-2018::2.12 | Assess the provider's country before placing data there and bind the provider to disclose compelled access |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.13 | Maintain a documented, tested termination plan with data retrieval and deletion |
2.2: Cloud computing governance – Central Bank of Jordan Cloud Computing Guideline (2018)
| Code | Title |
|---|---|
| central-bank-of-jordan-cloud-computing-guideline-2018::2.2.1 | Board approves the cloud computing policy and follows its implementation |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.2.2 | Senior executive management discharges the named cloud governance duties |
2.3: Cloud computing policy – Central Bank of Jordan Cloud Computing Guideline (2018)
| Code | Title |
|---|---|
| central-bank-of-jordan-cloud-computing-guideline-2018::2.3.1 | Policy defines the services and data to be assigned, their classification and the chosen models |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.3.2 | Policy sets data handling, security controls, provider assessment standards and expected outcomes |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.3.3 | Policy addresses integration, multi-provider interoperability, customer data protection and oversight mechanisms |
2.4: Risk management – Central Bank of Jordan Cloud Computing Guideline (2018)
| Code | Title |
|---|---|
| central-bank-of-jordan-cloud-computing-guideline-2018::2.4.1 | Integrate cloud risks into the company's risk assessment framework with the minimum content |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.4.2 | Set key risk indicators and monitor failure, customer impact, security and concentration risks |
2.5: Contracts, agreements and the cloud service level agreement – Central Bank of Jordan Cloud Computing Guideline (2018)
| Code | Title |
|---|---|
| central-bank-of-jordan-cloud-computing-guideline-2018::2.5.1 | Contracts carry the minimum commercial, control and governance terms |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.5.2 | Contracts protect data ownership, require consent to material changes and fix data locations |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.5.3 | Contracts require cooperation with third parties, consent to subcontracting, incident notification and the Central Bank's supervisory access |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.5.4 | Contracts state termination rights clearly and contain no impediment to immediate termination |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.5.5 | Cloud service level agreement sets the minimum performance and security terms |
2.6: Supervision of the cloud supplier – Central Bank of Jordan Cloud Computing Guideline (2018)
| Code | Title |
|---|---|
| central-bank-of-jordan-cloud-computing-guideline-2018::2.6.1 | Keep full responsibility, notify the Central Bank on contracting, resource supervision and secure on-site visit rights |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.6.2 | Put in place the procedures that let the Central Bank supervise |
2.7: Data security – Central Bank of Jordan Cloud Computing Guideline (2018)
| Code | Title |
|---|---|
| central-bank-of-jordan-cloud-computing-guideline-2018::2.7.1 | Protect data through physical security, classification, segregation, backup ownership and loss mitigation |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.7.2 | Encrypt data at rest, in transit and in backups under controlled key management |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.7.3 | Assess tokenisation solutions and keep tokenised data out of the provider's reach |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.7.4 | Define incident handling and run periodic penetration tests and vulnerability scans with the provider |
2.8 and 2.9: Access management and monitoring of security events and logs – Central Bank of Jordan Cloud Computing Guideline (2018)
| Code | Title |
|---|---|
| central-bank-of-jordan-cloud-computing-guideline-2018::2.8.1 | Control the provider's access to company systems and separate duties |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.8.2 | Guarantee effective, unrestricted access to the company's own data |
| central-bank-of-jordan-cloud-computing-guideline-2018::2.9 | Monitor security events and retain unrestricted access to the provider's log files |
What is Central Bank of Jordan Cloud Computing Guideline (2018) and who does it apply to?
Central Bank of Jordan Cloud Computing Guideline (2018) is a compliance framework from Jordan with 9 domains and 25 controls. The Central Bank of Jordan cloud computing guideline for supervised banks and financial companies: governance, policy, risk management, contract and service level agreement terms, supervision of the provider and Central Bank access, data security and encryption, access management and monitoring, business continuity, change management, data sovereignty and termination planning. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does Central Bank of Jordan Cloud Computing Guideline (2018) actually require?
Central Bank of Jordan Cloud Computing Guideline (2018) has 25 controls organised across 9 domains. The largest domains are 2.5: Contracts, agreements and the cloud service level agreement – Central Bank of Jordan Cloud Computing Guideline (2018) (5 controls), 2.7: Data security – Central Bank of Jordan Cloud Computing Guideline (2018) (4 controls), 2.3: Cloud computing policy – Central Bank of Jordan Cloud Computing Guideline (2018) (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of Central Bank of Jordan Cloud Computing Guideline (2018) do I already cover?
Central Bank of Jordan Cloud Computing Guideline (2018) does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement Central Bank of Jordan Cloud Computing Guideline (2018)?
Start your Central Bank of Jordan Cloud Computing Guideline (2018) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Central Bank of Jordan Cloud Computing Guideline (2018) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 25 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,248 frameworks.
Get Started Free →Free forever, no credit card required