For organisations wishing to implement cloud services, a compliance evaluation should be mandatory.
How should organisations approach a compliance evaluation?
First consider the legal and regulatory requirements of the sector.
Second consider the adherence to these regulations in terms of the following:
- Geographical – where are Datacentres located. Pay particular attention to any back up Datacentres or third party applications?
- Operational – are Business Continuity and Disaster Recovery procedures consistent with requirements? Are procedures for Data Breach and Security consistent with requirements? Are tools being used to perform quasi real time vulnerability assessments?
- Environmental – are current and future Green IT requirements met?
- Auditable – are auditing procedures consistent with requirements in place?
RedMule provides services to ensure that cloud based services are fully compliant.