FSC Mauritius Guidelines on Cloud Computing Services (2023)
The FSC Mauritius guidelines on cloud computing services for financial services licensees: cloud strategy and policy, risk management and materiality, FSC notification, contract terms, due diligence, the cloud security and data management framework, contingency and exit, audit reviews, board and senior management duties and retrieval of information.
FSC Mauritius Guidelines on Cloud Computing Services (2023) is a compliance framework from Mauritius with 9 domains and 17 controls. The largest domains are Sections 3 and 4: Cloud risk management framework and materiality assessment – FSC Mauritius Guidelines on Cloud Computing Services (2023) (3 controls), Section 10: Board of directors and senior management responsibilities – FSC Mauritius Guidelines on Cloud Computing Services (2023) (2 controls), Section 2: Cloud strategy and policy formulation – FSC Mauritius Guidelines on Cloud Computing Services (2023) (2 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (9)
Section 10: Board of directors and senior management responsibilities – FSC Mauritius Guidelines on Cloud Computing Services (2023)
| Code | Title |
|---|---|
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::10.1 | Board keeps its responsibilities and discharges the named duties |
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::10.2 | Senior management provides effective oversight of cloud deployment and reports incidents |
Section 11: Retrieving information and documents – FSC Mauritius Guidelines on Cloud Computing Services (2023)
| Code | Title |
|---|---|
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::11.1 | Be able to retrieve any information held by the provider at any time and keep meeting legal duties |
Section 2: Cloud strategy and policy formulation – FSC Mauritius Guidelines on Cloud Computing Services (2023)
| Code | Title |
|---|---|
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::2.1 | Implement a risk-based cloud strategy and policy covering the named aspects |
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::2.2 | Board approves the strategy and policy and reviews them at least yearly |
Section 5: Contractual obligations – FSC Mauritius Guidelines on Cloud Computing Services (2023)
| Code | Title |
|---|---|
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::5.1 | Use a written contract with the required cloud clauses |
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::5.2 | Control the provider's subcontracting and keep the provider fully liable |
Section 6: Due diligence on cloud service providers – FSC Mauritius Guidelines on Cloud Computing Services (2023)
| Code | Title |
|---|---|
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::6.1 | Conduct documented due diligence before engaging a provider |
Section 7: Cloud security and data management framework – FSC Mauritius Guidelines on Cloud Computing Services (2023)
| Code | Title |
|---|---|
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::7.1 | Maintain a cloud security management framework built on the named elements |
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::7.3 | Align security controls with materiality, sensitivity, classification and data location |
Section 8: Contingency plans and exit strategies – FSC Mauritius Guidelines on Cloud Computing Services (2023)
| Code | Title |
|---|---|
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::8.1 | Make sure the provider has a contingency plan with continuity and resilience elements |
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::8.3 | Hold a well-designed exit strategy and review it with the contingency plans at least yearly |
Section 9: Audit reviews – FSC Mauritius Guidelines on Cloud Computing Services (2023)
| Code | Title |
|---|---|
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::9.1 | Apply risk-based, consistently organised ongoing controls and monitoring of providers |
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::9.3 | Review all material cloud services at least yearly with skilled auditors and audited providers |
Sections 3 and 4: Cloud risk management framework and materiality assessment – FSC Mauritius Guidelines on Cloud Computing Services (2023)
| Code | Title |
|---|---|
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::3.1 | Maintain a documented cloud risk management framework with the named content |
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::4.1 | Assess materiality against the five factors |
| fsc-mauritius-guidelines-on-cloud-computing-services-2023::4.2 | Notify the FSC in writing at least 15 business days before deploying a material cloud service |
What is FSC Mauritius Guidelines on Cloud Computing Services (2023) and who does it apply to?
FSC Mauritius Guidelines on Cloud Computing Services (2023) is a compliance framework from Mauritius with 9 domains and 17 controls. The FSC Mauritius guidelines on cloud computing services for financial services licensees: cloud strategy and policy, risk management and materiality, FSC notification, contract terms, due diligence, the cloud security and data management framework, contingency and exit, audit reviews, board and senior management duties and retrieval of information. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does FSC Mauritius Guidelines on Cloud Computing Services (2023) actually require?
FSC Mauritius Guidelines on Cloud Computing Services (2023) has 17 controls organised across 9 domains. The largest domains are Sections 3 and 4: Cloud risk management framework and materiality assessment – FSC Mauritius Guidelines on Cloud Computing Services (2023) (3 controls), Section 10: Board of directors and senior management responsibilities – FSC Mauritius Guidelines on Cloud Computing Services (2023) (2 controls), Section 2: Cloud strategy and policy formulation – FSC Mauritius Guidelines on Cloud Computing Services (2023) (2 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of FSC Mauritius Guidelines on Cloud Computing Services (2023) do I already cover?
FSC Mauritius Guidelines on Cloud Computing Services (2023) does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement FSC Mauritius Guidelines on Cloud Computing Services (2023)?
Start your FSC Mauritius Guidelines on Cloud Computing Services (2023) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about FSC Mauritius Guidelines on Cloud Computing Services (2023) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 17 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,248 frameworks.
Get Started Free →Free forever, no credit card required