Cloud and infrastructure · 6 answer guides
How to answer cloud security questions in a security questionnaire
Hosting providers, shared responsibility, hardening, WAFs, environment separation, and data portability. These questions check how you run what you build.
Cloud hosting provider
Which cloud service providers (CSP) do you use to host your services?Shared responsibility model
How do you document and apply the shared security responsibility model (SSRM) between your organization, your cloud providers, and your customers?Cloud configuration hardening
How do you manage configuration and hardening of cloud infrastructure?Production environment separation
How do you segregate production and non-production environments?Web application firewall (WAF)
Do you utilize a Web Application Firewall (WAF)?Data portability and exit
Can customers export their data programmatically, and what portability and exit provisions exist (formats, retention, deletion on termination)?