Huawei Cloud O&M Security Practice
Huawei Cloud O&M Security Practice
O&M Account Security
● Centralized identity authentication and management by employee accounts and MFA for extra security
● O&M account and authorization management based on account lifecycle and permissions management
● VPNs and CBH instances for centralized O&M management and audits
Vulnerability Management
● A professional security incident response team (PSIRT)
● Effective channels for vulnerability intelligence awareness and gathering, including hwssecurity@huaweicloud.com
● An end-to-end vulnerability response system to automatically receive and prioritize vulnerability alarms for you
● A security bulletin platform for vulnerability disclosure and release of workarounds and fixes
Security Log and Event Management
● A centralized, comprehensive log system powered by big data analytics and that can be interconnected with third-party security information and event management (SIEM) systems
● A dedicated internal audit department that regularly audits activities involved in the O&M process
● A stable, comprehensive, multi-layer border security system that enables quick security event detection and location and fast workload isolation and restoration
Service Continuity and Disaster Recovery
● A geo-redundant (3 data centers in 2 cities) DR architecture that ensures high availability for your infrastructure
● Tailored DR solutions for all data centers, multi-node replication of your data, stable communications between data centers with high-speed fiber-optic connections, and cross-AZ disaster recovery
● Detailed service continuity plans and regular testing
