Specifying security baselines for SaaS, PaaS, and IaaS services
Security baselines for operations and governance is a key component to managing the security of your infrastructure. Security, networking, and infrastructure administration teams must all work together and have clearly defined roles to manage and maintain security baselines and continued protection for infrastructure, endpoints, identities, and data.
Cloud security requires a different way of thinking than traditional on-premises data center security. The physical security of the building, data center, and network interfaces is no longer “in-house,” and the IT and security professionals must collaborate on a consistent strategy for implementing, monitoring, and managing infrastructure, devices, identity, and data. This strategy includes the definition of processes and guidelines that will make up the security baselines for the company. In Chapter 7, Designing a Strategy for Securing Server and Client Endpoints...
