Back

Record cloud service derived data in the asset inventory.


CONTROL ID
13007
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain an asset inventory., CC ID: 06631

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • The inventory of assets of the cloud service provider should explicitly identify: – cloud service customer data; – cloud service derived data. (§ 8.1.1 Table: Cloud service provider, ISO/IEC 27017:2015, Information technology — Security techniques — Code of practice for information security controls based on ISO/IEC 27002 for cloud services, First edition 2015-12-15)
  • All Mission Owners are required to register all Cloud based systems/applications; their CSP/CSO, MCD, and connection method in the DISA Systems/Network Approval Process (SNAP) database Cloud Module. This registration will enable these systems/applications to be connected to the DISN and is crucial f… (Section 5.17.1 ¶ 1, Department of Defense Cloud Computing Security Requirements Guide, Version 1, Release 3)