The National Security Agency’s recommendations for cloud security

Cloud adoption comes with numerous advantages and benefits to an organization, but it also comes with a certain amount of risk. As the cloud industry becomes more mainstream, the underlying concept of cloud technology still isn’t fully understood by everyone who uses it, making security decisions a hassle. To ease the confusion, the National Security Agency (NSA) has published a document explaining the cloud infrastructure and its security vulnerabilities.

Introduction

Cloud vulnerability types according to the NSA

Misconfiguration

Poor access control

Shared tenancy vulnerabilities

Supply chain vulnerabilities

Summary

Cloud vulnerability classes according to the NSA:

The NSA categorizes cloud vulnerabilities into four classes:

Misconfiguration

Poor access control

Shared tendency vulnerabilities

Supply chain vulnerabilities