Frequently asked questions about Cloud Computing Service Security Assessment by CAC
Frequently asked questions about Cloud Computing Service Security Assessment by CAC
What is the CAC cloud computing service security assessment?
To improve security and controllability of cloud computing services and meet procurement requirements of government agencies and critical information infrastructure operators, the Cyberspace Administration of China (CAC), National Development and Reform Commission (NDRC), Ministry of Industry and Information Technology (MIIT), and Ministry of Finance jointly formulated the Measures for Cloud Computing Service Security Assessment.
A CAC security assessment is performed in accordance with applicable laws, regulations, policies, and national cybersecurity standards and with the aid of professional technical institutions and security experts. This assessment provides for governmental oversight of the security and controllability of a cloud computing platform. The assessment provides valuable information for government agencies and IT infrastructure operators during cloud service procurement.
CAC security assessment is mainly focused on the following aspects of cloud service providers:
· Basic information, such as credit worthiness and operational status
· The stability of the workforce, especially those employees with access to, or who are involved in, the collection of customer data and related metadata
· Supply chain security related to cloud platform technologies, products, and services
· Security management capabilities and cloud platform security controls
· Feasibility and ease of user data migrations
· Service continuity
· Other factors that may affect cloud service security
Which Huawei Cloud services have earned CAC cloud computing service certification?
Huawei Cloud e-Government cloud platforms and FinTech Cloud Infra have earned CAC security certification (enhanced level). The certification covers system development and supply chain security, system and communications protection, access control, configuration management, maintenance, emergency response, disaster recovery, audit, risk assessment, continuous monitoring, security organization and personnel, as well as physical and environmental security. CAC certification lets you rest at ease knowing that Huawei Cloud can meet your security requirements for cloud migrations.
Huawei Cloud also continuously monitors its cloud services as required to ensure that its cybersecurity management is always leading the industry.
You can view the cloud computing service security assessment records of Huawei Cloud on the official website of CAC.
If you would like to learn more about our products please contact us.