Cloud Security by default

Cloud Security
By Default to enable a more secure world

Manifesto

Download PDF | 49.8 kB

Many organizations worldwide are by now dependent on cloud infrastructure and services. Our societies, economies, health, and national security are reliant on their effective and secure operations.

The cloud brings important advantages in terms of availability and scalability and, if properly configured, security and resilience.

In the current situation, Cloud Service Providers (CSPs) require their customers to implement secure configurations, controls, and policies by selecting and activating appropriate options and designs to ensure adequate baseline security in their own environments.

The technical complexity of configuring and securing the cloud is, however, beyond the capacity of most user organizations. Existing initiatives to support customers with this burden are not comprehensive, consistent, or transparent enough to ensure the baseline level of security in customer-managed tools and environments. This leaves the customers vulnerable to malicious attacks and breaches and creates unwarranted risk.

The Cloud Security by Default initiative addresses this gap by bringing CSPs and their customers together in two-way conversations to validate, challenge, and support principles to establish out-of-the-box CSP offerings with appropriate baseline security by default.

The Manifesto, that you can download from the top of this page, was prepared to gather community support for the Cloud Security by Default iniative. If you want to join the community, please sign this document and return it to us by email. 

Supporting organizations

Publications

View all publications

Events