NIST SP 500-292 cloud actors

securityv1

/01 Views

Architecture landscapesecurity
Governance and deliverysecurity
Delivery and assurancesecurity

/02 About

Map consumer, provider, broker, carrier and independent auditor through provider operations and shared services

Purpose: Map consumer, provider, broker, carrier and independent auditor through provider operations and shared services. Reading the diagrams: Architecture landscape contains the complete semantic model. Governance and delivery isolates organizational decisions and enabling services. Delivery and assurance isolates runtime capabilities, controls, stewardship and evidence. Adoption: this is a reference architecture, not proof of implementation or regulatory compliance. Replace generic roles with actual owners and solutions. Record decisions, scope, constraints, interfaces, data classification, implementation status and evidence. Verify all applicable policies and control objectives against the current official source. Source and attribution: original Arq interpretation informed by https://www.nist.gov/publications/nist-cloud-computing-reference-architecture?pub_id=909505. No official source artwork is reproduced, and no endorsement or certification by the source publisher is implied.

Published by Lattix · 12 elements · 13 relationships · validated on publish

/03 Contents

Business Actor
Cloud consumer, Cloud broker, Cloud provider, Cloud carrier, Cloud auditor
Business Service
Consumed cloud service
Application Component
Service orchestration, Provisioning and configuration
Technology Service
Network transit
Process
Independent audit, Security and privacy assurance
Data Store
Assessment evidence
NIST SP 500-292 cloud actors · Architecture hub · Arq