Cloud shared security responsibility model/en: Difference between revisions

Cloud shared security responsibility model/en (view source)

Revision as of 19:57, 27 January 2023

29 bytes added , 1 year ago

Updating to match new version of source page

FuzzyBot

Bots

38,760

edits

@@ Line 2: / Line 2: @@
-Canada’s advanced research computing environment includes several cloud platforms for research.  This document’s purpose is to describe the responsibilities of the cloud teams who administer our cloud platforms; the responsibilities of the many research teams who use these platforms; and shared responsibilities between both.  '''Security in the cloud''' is the responsibility of our research teams.  '''Security of the cloud''' is the responsibility of our our cloud teams.
+Canada’s advanced research computing environment includes several cloud platforms for research.  This document’s purpose is to describe the responsibilities of the cloud team who administers our cloud platforms; the responsibilities of the many research teams who use these platforms; and shared responsibilities between both.  '''Security in the cloud''' is the responsibility of the research teams.  '''Security of the cloud''' is the responsibility of our our cloud support team.
 [[File:Cloud_shared_security_responsibility_model.png|600px|thumb|center| Cloud shared security responsibility model (Click for larger image)]]
@@ Line 15: / Line 15: @@
 ==Cloud team responsibilities: Security of the cloud==
-Cloud teams are responsible for the following:
+The cloud support team is responsible for the following:
 * protecting our cloud platforms;
 * configuring and managing these compute, storage, database, and networking capabilities;
@@ Line 21: / Line 21: @@
 * ensuring the environmental and physical security of the cloud infrastructure.
-Our cloud teams do not support or manage virtual machines.  However, if a virtual machine is adversely impacting others, it may be shut down and locked by a cloud team.  In these cases, the research team may be asked to provide remediation plans before access to the virtual machine is restored.  This is so that others are protected.
+Our cloud support team does not support or manage virtual machines.  However, if a virtual machine is adversely impacting others, it may be shut down and locked by the team.  In these cases, the research team may be asked to provide remediation plans before access to the virtual machine is restored.  This is so that others are protected.
 ==Shared responsibilities==
-Compliance is a shared responsibility between our cloud teams and the research teams using our cloud services.  Everyone is responsible to comply with applicable laws, policies, procedures, and contracts. Alliance Federation and institutional policy compliance is required, particularly with respect to the [https://alliancecan.ca/sites/default/files/2022-03/1-terms-of-use.pdf Terms of Use].  Being ''good Net citizens'' will protect the reputation of our networks and prevent all of us from being blocked or banned.
+Compliance is a shared responsibility between our cloud support team and the research teams using our cloud services.  Everyone is responsible to comply with applicable laws, policies, procedures, and contracts. Alliance Federation and institutional policy compliance is required, particularly with respect to the [https://alliancecan.ca/sites/default/files/2022-03/1-terms-of-use.pdf Terms of Use].  Being ''good Net citizens'' will protect the reputation of our networks and prevent all of us from being blocked or banned.
 If you have any questions about this model please contact cloud@tech.alliancecan.ca.