ISO to introduce cloud security standard

ISO has begun developing a standard for cloud computing security. The document will be ready no earlier than 2013.

The document describes cloud models and the place of cloud users and providers within them; the use of clouds in security policy; information security organization; asset management; personnel management; physical security; operational management and communications management; access control; procurement, development and support of systems; incident management; business continuity management and compliance management.

The document's authors aim to describe best practices related to the use of cloud computing from an information security perspective. The standard will address not only technical aspects but also organizational ones.

In particular, the document will describe in detail the organization of information security, namely the content of the confidentiality agreement and agreements with third parties.